Short answer. For Facebook hacked account recovery, open facebook.com/hacked on a phone or browser you have used for that profile before. Secure the email first so the reset reaches you. If the login says the account is disabled, screenshot that notice and appeal it. Never send the password to someone who messages you.
Facebook hacked account recovery starts at facebook.com/hacked. Facebook’s help page says to open facebook.com/hacked on a device you have used to log into that profile before. Type the address yourself. Do that before you try a form someone sent you in a message.
A hack and a disable are different screens. This page is the hack. If the login says the account is disabled, use Facebook account disabled after you secure the email.
Secure the email before the reset
The person who can read the email on the account receives the password reset. If the hacker can read it, the reset goes to them.
On a computer you trust:
Open the email you used for Facebook. If you see sign-in alerts you do not recognize, change that email password and turn on the extra sign-in check from the email provider.
Search for mail from Facebook about an email change, a password change, or a new login. Save those messages. They are your timeline.
If Facebook already wrote that the email on the profile was changed, use the link in that message while it still works.
If you cannot open the old inbox at all, recover the email first. A Facebook link to a dead inbox does not help you.
Write down the old email and the old phone number, even if they were changed. The recovery form asks what used to be on the account.
Use Facebook’s hacked page
Open facebook.com/hacked in a browser, on a device you have logged in with before. Enter the name, email, or phone that belongs to the profile. Follow the steps on the screen. Type any code yourself. A code is a key. It is not something you forward.
Facebook can ask for an ID or a video to confirm you are the person on the profile. Do that check inside Facebook. Do not email a passport photo to an address from a comment, and do not send it to us. We never ask for ID scans.
If the flow ends on “We disabled your account” or “We suspended your account,” stop and appeal from that notice. In the text box, say the profile was hacked, the date you lost it, and that you want the decision reviewed. Submit once. Watch the email you just secured.
A linked Instagram account can be in the same mess. Check it. If Instagram shows its own notice, follow Instagram hacked recover.
After you are back in
Do this in one sitting.
Set a password you have never used on another site.
Log out other sessions from security settings.
Turn on two-factor authentication. Save the backup codes offline, not in a Facebook message.
Check the email, phone, and trusted contacts on the profile. Put back anything you did not change.
Open Accounts Center and look at the linked Instagram profile.
Remove apps you do not recognize. Those apps are a common way in.
Tell friends if the profile sent them strange links. A one-line note is enough once the account is locked down.
People who offer to log in for you
A hacked profile attracts messages. Some of them will say they can get in today if you send the password, a six-digit code, or a photo of your ID. That is how a second person takes what the first person took. Facebook does not do support in random DMs. UnbanPro does not either.
What we do is prepare and file the appeal when the hack turned into a disable or a suspension. Send the name on the profile and a screenshot of the notice. The review is free. It takes a few days. We file through Meta’s own official channels. We open support chats, send follow-up emails, and push the case hard until it gets looked at.
The steps are on how it works. Start a case on the contact page, or message us on WhatsApp. Leave every password and every code out.
Go to facebook.com/hacked on a device you have used to log in before. Follow the steps there, and keep the code to yourself. If the screen says disabled or suspended, appeal from that notice as well.
What if I cannot open the email on the Facebook account?
Recover that email with the email provider first. Facebook sends the recovery mail there. Their help also has a path for people who cannot reach the email or phone on the account. Have the old address written down.
The hacker also disabled the profile. What then?
Secure the email, then treat the disable notice as its own appeal. A password reset does not clear a disabled screen. Send us the name on the profile and a screenshot.
Do you need my Facebook password?
No. We never ask for the password, a text code, or backup codes. Send the profile name, the screenshot, and the email you can still open.