Facebook remains one of the most targeted platforms for hackers, scammers, and phishing schemes. With billions of active users, a compromised account can lead to identity theft, financial fraud, and damage to your personal or professional reputation. Knowing the warning signs early — and taking preventive action — can save you from a lot of stress.
This guide breaks down the clearest signs your Facebook account may be hacked, and the practical steps you can take right now to protect it.
Signs Your Facebook Account Has Been Hacked
-
You Can't Log In With Your Usual Password If your correct password suddenly stops working and you haven't changed it yourself, that's one of the strongest signs someone else has taken control. Hackers often change the password immediately after gaining access to lock the real owner out.
-
Unfamiliar Posts, Messages, or Comments Check your timeline and Messenger outbox. If friends mention receiving strange messages from you, or you see posts, comments, or shares you never made — especially ones promoting suspicious links, crypto schemes, or "urgent help" scams — your account is likely compromised.
-
Changes to Your Profile Information Hackers sometimes alter your name, profile picture, cover photo, bio, or linked email/phone number to make the account harder for you to recover and easier for them to use for scams.
-
Login Alerts From Unrecognized Devices or Locations Facebook sends notifications when your account is accessed from a new device or location. If you get an alert for a login from a city or country you've never visited, treat it as a red flag immediately.
-
Friend Requests You Didn't Send Attackers often use hijacked accounts to send mass friend requests or messages to your contacts, frequently containing malicious links or requests for money.
-
Missing Access to Linked Apps or Pages If you manage a Facebook Page, Ads account, or third-party apps connected via Facebook Login, and suddenly lose admin access or see unauthorized changes, this is a strong indicator of a breach — particularly serious for business accounts.
-
Unusual Activity in Your Account's Security Settings Go to Settings & Privacy > Settings > Security and Login. Review the "Where You're Logged In" section. Any unfamiliar device, browser, or location listed here means someone else currently has access.
What to Do Immediately If You Suspect a Hack
Step 1: Try to Log In and Change Your Password
If you can still access your account, change your password immediately to something strong and unique — a mix of upper/lowercase letters, numbers, and symbols, ideally generated by a password manager.
Step 2: Log Out of All Other Sessions
In Security and Login settings, use the "Log Out of All Sessions" option. This immediately kicks out anyone else who may be logged in from another device.
Step 3: Check and Revoke Connected Apps
Go to Settings > Apps and Websites and remove any app you don't recognize or no longer use. Hackers sometimes exploit third-party app permissions to maintain access even after a password change.
Step 4: Alert Your Friends
Post a warning (from a different platform if you're locked out) letting friends know your account was compromised, so they don't fall for scam messages sent in your name.
Step 6: Check for Identity or Financial Fallout
If your Facebook account was linked to payment methods, Marketplace transactions, or ad accounts, review your bank and card statements for unauthorized charges, and consider a fraud alert with your bank if anything looks suspicious.
How to Prevent Your Facebook Account From Being Hacked
- Enable Two-Factor Authentication (2FA) This is the single most effective step you can take. With 2FA turned on, even if someone steals your password, they can't log in without a second verification code sent to your phone or generated by an authenticator app.
- Enable it under Settings & Privacy > Settings > Security and Login > Two-Factor Authentication.
- Use a Unique, Strong Password Never reuse your Facebook password on other sites. If one service is breached, hackers commonly test the same email/password combination across other platforms — a technique called "credential stuffing."
- Be Skeptical of Suspicious Links Phishing links disguised as Facebook login pages are one of the most common ways accounts get compromised. Always check the URL before entering your credentials — it should be facebook.com, not a lookalike domain.
- Review App Permissions Regularly Periodically audit which third-party apps and games have access to your Facebook data, and remove anything unnecessary.
- Keep Your Recovery Info Updated Make sure your linked email address and phone number are current, so you can quickly regain access if something goes wrong.
- Turn On Login Alerts Facebook lets you get notified via email or notification whenever your account is accessed from an unrecognized device — enable this under Security and Login settings so you catch intrusions early.
- Avoid Public Wi-Fi for Sensitive Logins Unsecured public networks make it easier for attackers to intercept your login credentials. Use a VPN or mobile data when logging into sensitive accounts on the go.
Final Thoughts A hacked Facebook account can escalate quickly, from spam messages sent to your friends to full identity theft. The good news is that most breaches are preventable with a few proactive habits: strong unique passwords, two-factor authentication, regular security checkups, and healthy skepticism toward suspicious links.
If you notice any of the warning signs above, act immediately — every minute counts when it comes to regaining control of a compromised account. Prevention, though, is always easier than recovery, so take the time today to lock down your account settings before you ever need to use them.