Instagram Hacked? Here’s How to Recover Your Account

Once you click a link or enter your information on a fake website, hackers can use it to gain access to your accounts or install malware on your device. That’s why it’s crucial to always double-check the sender’s email address, avoid clicking suspicious links, and never enter your password unless you’re certain you’re on the official Instagram website or app.

When a company suffers a data breach, hackers may gain access to its database of user information, including usernames, email addresses, and passwords. Once they’ve obtained these credentials, they may try them on other websites in what’s known as credential stuffing, assuming you’ve reused the same password across multiple accounts. That’s why it’s so important to use unique, strong passwords for every account and to update them regularly.

Malware (short for malicious software) is a broad term for programs designed to infiltrate your device without your consent. Some types of malware, like keyloggers, silently run in the background and record every keystroke you make, including your usernames and passwords. Others can take screenshots, access saved passwords in your browser, or even give hackers remote control of your device. You might unknowingly install malware by clicking a suspicious link, downloading a fake app, or opening an infected email attachment. Always be vigilant on the internet!

What are some ways to protect my Instagram account?

Hacking isn’t limited to high-profile Instagrammers like celebrities and influencers with millions of followers. “Any account can be a target, because if the hackers are successful, they can use the hacked account to try to get important information like credit card numbers, addresses, and PINs from other unsuspecting users,” Simon says.

Even though no method of account protection is completely fail-safe, staying on top of security best practices can hopefully prevent you from being hacked.

A strong password is an obvious place to start—and, yes, those strings of letters and numbers suggested by Apple’s iOS on iPhones and Google on Androids are pretty safe. Weak passwords, such as “password” or “123456” might be easy to remember, but they’re also incredibly easy to hack. (If you’re concerned about remembering all of your logins, a digital password manager can help.)

Two-factor authentication requires users to enter a security code from an authentication app or your cell phone via text message (SMS) every time you log in via a new device—and it’s a solid deterrent to scammers. Meta offers this service, and you can set it up via the security page in the Instagram app.

Keep tabs on your login activity, which can also be found under the security section of the app. There, you’ll see all the devices that your Instagram account is currently logged into, plus their geographic locations. If you see you’re logged in somewhere you shouldn’t be, you can log out of those devices from your current one. Then change your password! Be sure to pick a unique password that’s very different from your old one.

Granting third-party apps access to your account is an easy way to share content across different platforms, but it does come with some level of risk: Hackers can break into those apps, which may be less secure than Instagram itself, and steal your Instagram login info. Head to your security settings, then click Apps and Websites to see what other apps have access to your Instagram account. Keep an eye out for any big data breaches that might affect those apps—if one happens, you’ll want to change your password immediately.

Though this won’t necessarily protect your Instagram account, you can download an archive of your posts, your followers, and even your comments—we recommend doing so periodically. That way, if you have your Instagram hacked and eventually need to rebuild your account, you have a running start. Set a reminder on your calendar to do this quarterly or even monthly if you’re a very active Instagram user.

What if an account is impersonating me on Instagram?

If you discover an Instagram account that’s pretending to be you, this is known as spoofing.