My Instagram or Facebook account will not open

Take it back before the other person settles in.

right away9 steps in total

Tick as you go, it stays on your device, even if you close the tab.

RIGHT NOW10 min

Start with your mailbox, not with the social network.If the attacker controls your email they will undo every recovery attempt. The mailbox comes first.Start the network’s “hacked account” flow.It is not the same as “forgot password”: it accepts an ID document and a photo of you when the email has been changed.Warn your circle through another channel.The next step of the scam is a message to your contacts asking for money or a code. One message in the family group stops it.

WITHIN THE HOUR20 min

Sign out of every open session.Changing the password is not enough: an already-open session stays valid. The setting is called “devices” or “active sessions”.Check the account’s recovery emails and phone numbers.That is the classic back door: you get the account back, but the attacker keeps a recovery number and returns next week.Revoke connected third-party apps.A game or a filter installed three years ago may still hold full access to your account.

ONCE THE ACCOUNT IS BACK25 min

Turn on two-factor authentication by app, not by SMS.SMS can be hijacked by porting your number to another carrier. A code app stays on your phone.Store the backup codes off the phone.Printed in a drawer, they are what saves you the day you lose the device.File a complaint if money was requested in your name.The online pre-complaint is enough to start, and the receipt helps with the bank and with the people approached.Online pre-complaint (France)

In the book : ch. 05 · p. 89

So it does not happen again

The roadmap actions that treat the cause, not the symptom.

Set up a password managerYour brain cannot remember 80 unique passwords, so it cheats: it reuses. A password manager generates and stores strong, unique passwords in an encrypted vault, protected by a single master password.20 min

Something else worrying you?

Related areas : Social media · Passwords & 2FA

I clicked the link, and I regret itThe first thirty minutes matter. The rest much less.right away All situations

You have done everything. It is out.

So it does not happen again

Something else worrying you?