How to recover a hacked Instagram Account on Android: A step-by-step guide

Check for Instagram’s Security Email
If someone has changed your email address on Instagram, the platform usually alerts you. Look for a message from security@mail.instagram.com. This email allows you to reverse unauthorised changes by selecting secure my account. If your password and other details have also been altered and you cannot update your email address, you will need to rely on Instagram’s recovery tools instead of the email reversal option.

Start the Recovery Process on the Login Screen
Open Instagram on your Android device and stay on the main login screen. Tap Get help logging in to initiate the recovery process. This is the starting point for most cases where unauthorised access prevents you from logging in normally.

Request a Login Link
Enter your username, registered email address or phone number and tap Send login link. If you no longer have access to any of these details, you will need to move to Instagram’s support workflow through its help page. Complete the captcha challenge to verify that you are not a bot, then check the email or SMS you receive. Tap the login link and follow the on-screen instructions to regain access.

Request a Security Code Instead
If the login link fails or never arrives, request a security code from Instagram. Provide a secure email address that you can access right now and submit the request. Instagram will then send an email outlining the next steps required to proceed with account recovery.

Identity Verification for Accounts Without Personal Photos
Some accounts do not contain images of the owner. In these cases, Instagram sends an automated email asking for details such as the email address or phone number used at sign-up and the type of device used originally. Providing accurate information increases your chances of recovering the account quickly.

Identity Verification for Accounts With Personal Photos
If your account features photos of you, Instagram may request a short video selfie where you turn your head in different directions. This confirms you are a real person. The video is not visible on Instagram, is used only for verification and is deleted within 30 days. Instagram states that facial recognition is not used in this process.

Once you regain control, change your password immediately or send yourself a password reset email. Enable two-factor authentication to strengthen security. Confirm that your registered email address and phone number are correct. Review the Accounts Center to remove any linked profiles you do not recognise and revoke access for suspicious third-party apps. Keeping these details updated helps reduce the chances of future unauthorised access.