Last week, a close friend of mine had a panic attack — her Facebook account had been hacked. She couldn't log in, her profile picture was changed, and her email address was replaced. The hacker even started messaging people from her account, asking for money. It was scary. Fortunately, we managed to recover the account. I'm sharing the exact steps we took so you or someone you know can act fast if it happens.

Step 1: Go to Facebook's Hacked Account Page

The first thing we did was go to www.facebook.com/hacked. This is Facebook's official tool to report compromised accounts. Even if you can't log in, you can start the recovery process from here.

We selected the option “My account was compromised” and followed the on-screen prompts.

Step 2: Identify the Account

Facebook asked us to enter the phone number or email address associated with the account. Since the hacker had changed her primary email, we tried an old phone number that was still linked to the account. Luckily, that worked. Facebook located the account.

Step 3: Verify the Identity

Next came the security check. Facebook provided options like identifying friends in tagged photos, confirming old passwords, or getting a code via email or SMS. We chose the option to receive a code on her phone. Once she entered the verification code, Facebook allowed her to reset her password.

Tip: Always enable two-factor authentication (2FA) so that even if someone gets your password, they can't log in without a code.

Step 4: Secure the Account

After logging in again, Facebook prompted us to review recent activity. We found that the hacker had:

  • Sent messages

  • Changed the email address

  • Added strange apps

We removed all unfamiliar email addresses and apps. Then we logged out of all devices via Settings > Security and Login > Where You're Logged In.

Step 5: Report Suspicious Activity

We used the “Help Us Understand” tool to report that the account had been hacked. This step helps Facebook monitor and block similar future activities.

Step 6: Notify Friends

We posted a message on her timeline and sent messages to close friends letting them know the account was compromised — just in case anyone had received weird messages.

Final Tips to Prevent Facebook Hacking

  1. Use a strong, unique password – never reuse passwords from other sites.

  2. Turn on Two-Factor Authentication (2FA) – under Facebook's security settings.

  3. Avoid phishing links – never click suspicious links, even if they appear to come from friends.

  4. Review login activity regularly – check for unknown devices and remove them.

In Conclusion

Getting hacked can feel violating and stressful. But with the right steps, you can recover your account and secure it from future attacks. I hope this guide helps anyone facing a similar situation.

If you want a more detailed breakdown, I've compiled additional resources on account recovery and cyber safety on my blog here: https://phonehackers.net/my-friends-facebook-was-hacked/.

Stay safe online!