How to recover a hacked or suspended social media account

The short answer

If an account is hacked, secure the email address behind it first, then use the platform’s own recovery page, change the password, turn on two-step verification, remove apps and devices you do not recognise, and undo anything the intruder changed or posted. Warn your followers from another account so nobody falls for messages sent in your name. If the account was suspended rather than hacked, use the platform’s appeal process and fix whatever broke its rules.

Speed matters. Google tells people to change their password immediately if someone else may be signed in, and YouTube says its hacked-channel support is limited to incidents within the past 9 months, so older cases may not be recoverable.

The first hour

Work through these in order:

• Secure the email account linked to the social account, since whoever controls it can reset every password.
• Go to the platform’s official recovery page, typed in yourself, never from a link in a message.
• Change the password to one you have never used, and turn on two-step verification.
• Remove devices, sessions and connected apps you do not recognise; Google’s guidance also says to check recovery phone numbers and emails for unfamiliar changes.
• Undo what the intruder changed: name, bio, link, posts, messages, admins.
• Warn followers, from another account or once you are back in, not to click links sent in your name.

Where to start, by platform

Each platform has its own recovery route. Use the official one. Instagram’s Help Center gives its address in one line: “If someone gains access to your account or you’re unable to log into your account, visit www.instagram.com/hacked to secure your account.”

YouTube, step by step

YouTube’s own guidance is a good model for any platform. Recover and secure the Google Account behind the channel, revert any unwanted changes to the channel immediately to avoid policy penalties, delete videos you did not upload, and ask everyone else who manages the channel to secure their accounts too. YouTube offers a hacked channel assistant, and eligible creators can contact Creator Support once the account is recovered. It also warns that it is not always possible to confirm the intruder has been removed, which is why the clean-up matters.

If the account was suspended instead

A suspension is the platform acting on its rules, not an intruder. Read the notice carefully: it usually says which rule was broken and how to appeal. Appeal through the platform’s own form, once, clearly, with any context that matters, and remove or fix the content in question. A hacked account can be suspended because of what the intruder posted; YouTube notes that an appeal may not be accepted if account recovery is incomplete, so recover first and appeal second.

Prevent it next time

A few habits stop most account takeovers:

• Two-step verification on every account, using an authenticator app rather than text messages where possible.
• A unique password for each account, kept in a password manager.
• A separate, secure email address for social accounts.
• Never sign in from a link in a message, even one that looks like it comes from the platform.
• Give team members their own access with roles, rather than sharing one password.
• Review connected apps and active sessions every few months, and remove what you no longer use.

Protect your business while it is fixed

Pause anything scheduled to the account so posts do not go out to an account you do not control, post a short notice on your other channels, and point customers to a channel you still run. Keep a record of what happened and when, which helps with any appeal and with telling customers what to watch for.

Questions

Sources

1. YouTube, Recover a hacked YouTube channel, checked October 2026.
2. Google, Secure a hacked or compromised Google Account, checked October 2026.
3. Instagram, Hacked Instagram Account, checked October 2026.