
What to do when a social media account is hacked
Recover access, remove the intruder, inspect changes, warn contacts, and close the routes back in.
Read the guideAccount security
Start with the accounts that control password resets, payments, stored identity details and access to other services.

Account library
Recovery, passwords, MFA and post-incident cleanup.

Recover access, remove the intruder, inspect changes, warn contacts, and close the routes back in.
Read the guide
Protect the vault first, migrate important accounts in stages, replace reused passwords, and keep recovery outside the vault.
Read the guide
Strengthen the account that controls many of your password resets and recovery paths.
Read the guideVerify the notice, identify the exposed data, and choose proportionate protective steps.
Read the response planProtect sign-ins, recovery paths and active sessions.
A password manager can reduce reuse while preserving recovery options.
Set up a password manager →Passwords are only one route in. Remove unfamiliar sessions, apps and recovery methods after a compromise.
Use the takeover checklist →Review recovery details, sessions, forwarding rules and MFA methods.
Secure your email account →Keep backup codes and account recovery details somewhere you can reach without the account itself.
Open the checklist →