How to check if Facebook was hacked
If you suspect unusual activity on your Facebook account, it is important to verify the warning signs quickly.
This guide explains how to check if Facebook was hacked, what suspicious behavior to look for, and which security settings can confirm whether someone else has accessed your account.
Facebook accounts are valuable targets because they often contain personal data, contact lists, Messenger conversations, and login access to connected apps.
A few targeted checks can tell you whether the issue is a glitch, a forgotten login, or an actual account compromise.
Common signs your Facebook account may be hacked
Not every odd alert means a breach, but several patterns strongly suggest unauthorized access.
Watch for changes that you did not make and activity that does not match your behavior.
- Posts, comments, or messages you did not send
- Login alerts from unfamiliar devices, browsers, or locations
- Password or email changes you did not request
- Friend requests sent to people you do not know
- Ad activity, page changes, or payment methods you did not add
- Security emails from Facebook about new sign-ins or account changes
If you notice one sign alone, it may be accidental.
Two or more unexplained changes, especially if they happen close together, usually deserve immediate action.
Check your recent Facebook login activity
The fastest way to confirm suspicious access is to review active sessions and recent logins.
Facebook shows where your account is signed in, which device was used, and sometimes the approximate location.
- Open Facebook and go to Settings & privacy.
- Select Settings.
- Open Password and security.
- Review Where you’re logged in or Login alerts.
Look for devices you do not recognize, sessions in locations you were not using, or logins that happened when you were offline.
If something looks suspicious, log out of that session immediately and change your password.
Review account changes you may have missed
Hackers often try to lock you out by changing contact details, recovery methods, or privacy settings.
Checking these fields can confirm whether the account has been altered.
Verify your email address and phone number
Make sure the primary email and phone number still belong to you.
If a hacker changed them, recovery becomes harder because reset codes may go to the wrong destination.
Inspect your name, birthday, and profile details
Unexpected changes to your name, birthday, profile picture, or bio can signal tampering.
These edits may seem minor, but they are often used to impersonate you or confuse your contacts.
Check linked apps and websites
In the Apps and Websites section, review any third-party services connected to your Facebook account.
Remove anything unfamiliar, inactive, or no longer needed, because connected apps can be another route for unauthorized access.
Look for suspicious messages and posts
Compromised Facebook accounts are often used to send spam, phishing links, or scam messages.
Check Messenger and your timeline for outgoing activity you do not recognize.
- Messages with urgent language, fake giveaways, or payment requests
- Posts promoting cryptocurrency, gift cards, or adult content
- Replies from your account that sound unlike you
- Deleted messages or archived threads you never touched
If friends report strange messages from your profile, take the report seriously even if you have not noticed anything yourself.
Hackers often operate quietly in the background.
Check Facebook security emails and notifications
Facebook usually sends alerts when important account changes occur.
Search your inbox for emails from Facebook or Meta about new logins, password resets, email changes, or two-factor authentication updates.
Important alerts to look for include:
- New login from an unfamiliar browser or device
- Password reset request you did not make
- Email address or phone number changed
- Two-factor authentication turned off
- Suspicious activity detected on your account
Make sure the sender is legitimate before clicking anything.
A real Facebook security email should match official domains and should not ask for your password in the message body.
Use Facebook’s security tools to confirm and fix access
Once you suspect a compromise, use Facebook’s built-in tools to secure the account.
These features help you confirm whether the breach is active and remove intruders quickly.
Run a security checkup
Facebook may offer a Security Checkup that walks you through password strength, login review, and recovery options.
Use it to identify weak points in your account setup.
Change your password immediately
Choose a strong, unique password that you have never used anywhere else.
A password manager can help generate and store one safely.
Enable two-factor authentication
Two-factor authentication adds another verification step during login.
Authenticator apps are generally more secure than SMS codes because text messages can be intercepted or redirected.
Log out of all sessions
If you think someone else may still be inside your account, sign out of all devices.
This forces active sessions to end and helps stop ongoing access.
What to do if you cannot log in
If the hacker changed your password or recovery information, use Facebook’s account recovery flow as soon as possible.
The faster you act, the better the chance of regaining control before more settings are altered.
- Go to Facebook’s login page and select the account recovery option.
- Use your email, phone number, or name to find the account.
- Follow the instructions to confirm your identity.
- Check your inbox for account recovery or password reset messages.
If you suspect the hacker also changed your email account, secure that inbox first.
Email access is often the key to resetting Facebook and other connected accounts.
Secure connected accounts and devices
A Facebook compromise can be part of a wider security problem.
If the password was reused elsewhere, other accounts may also be at risk.
- Change passwords on email, Instagram, and any site that used the same password
- Scan your phone and computer for malware using trusted security software
- Check browser extensions and remove suspicious add-ons
- Update operating systems and apps to close known vulnerabilities
Public Wi-Fi, phishing links, and fake login pages are common ways attackers steal credentials.
Review where you entered your password recently if the source of the breach is unclear.
Prevent another Facebook hack
After you recover the account, reduce the chance of a repeat incident by tightening your security habits.
Prevention is much easier than recovery after someone has already changed recovery settings or messaged your contacts.
- Use a unique password for Facebook
- Keep two-factor authentication enabled
- Review login alerts regularly
- Remove old devices and unused app connections
- Avoid clicking unknown links in messages or emails
- Be cautious with fake giveaways, support scams, and impersonation attempts
Facebook account security depends on both platform settings and user behavior.
Regular checks make it easier to spot unauthorized access early, before the damage spreads to your contacts, business pages, or linked services.