Facebook Account Recovery: How to Get Back Into Your Account

How do you recover a Facebook account?

You recover a Facebook account through the “Forgotten password?” flow: enter the email, phone number, or username linked to the account, then confirm your identity with a code sent to your email or phone. If that doesn’t work, Facebook offers further options, logging in from a device you’ve used before, verifying with a government ID, or, for a hacked account, the dedicated recovery process. The right path depends on whether you’ve simply forgotten your password or lost the account to someone else.

Key Takeaways

• Start at the “Forgotten password?” link and recover via a code sent to your email or phone.
• If you can’t get a code, Facebook can verify you through a recognised device or a government-issued ID.
• For a hacked account, use facebook.com/hacked, the dedicated compromised-account flow.
• Prevent future lockouts with two-factor authentication, login alerts, and Facebook’s newer passkey sign-in.

Losing access to Facebook can mean losing years of photos, messages, and connections, and for businesses, access to Pages and ad accounts too. The recovery process is designed to confirm you’re the real owner, which is why it can take patience. This guide covers the current 2026 methods step by step, and how to secure your account so you don’t need them again. If your account runs business assets, our overview of Facebook for business is worth a look once you’re back in.

What are the first steps to regain access?

The first steps are to go to the login page, click “Forgotten password?”, and identify your account, then receive and enter a recovery code sent to your registered email or phone. This is the standard route and resolves most lockouts, provided you still have access to the email or phone number on the account.

Here’s the process:

1. On the Facebook login page, click Forgotten password?
2. Enter the email, phone number, or username linked to your account so Facebook can find it.
3. Choose where to send your login code, your registered email or phone.
4. Enter the code, then create a new, strong password you haven’t used elsewhere.

The whole flow hinges on having access to the email or phone on the account, which is why keeping those current matters so much. Note that older recovery shortcuts have been retired: Facebook no longer uses security questions, and the “Trusted Contacts” feature (which let friends hold recovery codes for you) was discontinued in 2022, so ignore any guide that still recommends it. If the standard code route doesn’t work, the next section covers the alternatives.

What if you can’t get a recovery code?

If you can’t receive a code because you’ve lost access to the email or phone, Facebook can still verify you through a device you’ve previously used or by checking a government-issued ID. These fallback options exist precisely for the harder cases where the usual contact methods are out of reach.

Two routes help here. First, try logging in from a device or browser you’ve used to access Facebook before, Facebook often recognises a trusted device and lets you confirm it’s you that way. Second, Facebook may offer identity verification, where you upload a photo of a government ID (passport, driving licence, or national ID); it checks the name and details against the account and restores access once confirmed. This is slower and more involved, but it’s the legitimate path when you’ve genuinely lost your contact methods. Throughout, only use Facebook’s official flows, never a third-party “recovery service,” which are almost always scams that will take your money or your remaining access.

How do you recover a hacked or disabled account?

For a hacked account, you use Facebook’s dedicated compromised-account process at facebook.com/hacked; for a disabled account, you appeal through the on-screen prompts or the Help Centre. The route differs from a simple lockout because someone else may have changed your details, so Facebook has a separate flow to prove ownership and lock the attacker out.

If your account is hacked, act fast: go to facebook.com/hacked, and Facebook walks you through securing it, reviewing recent changes (like an altered email, password, or name), reverting them, and locking out the intruder. If the attacker changed your contact email, Facebook can often still recover the account using your original details or ID verification. If your account was disabled for a suspected policy violation rather than hacked, you’ll usually see an option to request a review or appeal; provide the information requested and wait for Facebook’s decision. In both cases, patience and using only the official process are what get you back in, and once recovered, change your password immediately and turn on the security features below.

What if your recovery request is rejected?

If Facebook rejects your ID or identity check, you’re not out of options, you can retry with a clearer submission, use a different ID, or appeal. Rejections usually come down to a photo Facebook can’t read or details that don’t match the account.

First, retry the upload with a clear, well-lit photo showing all four corners of the document and no glare, and make sure the name matches the one on the account. If it still fails, try a different accepted ID type (passport, driving licence, or national ID). Beyond that, use Facebook’s appeal and review process; Meta has been streamlining account-support requests into a faster flow with fewer steps and AI-assisted review for eligible cases, and in some cases offers a short selfie-video check to confirm you’re a real person (Meta). Recovery of this kind is rarely instant, a person or system has to review it, so submit once and wait for the decision rather than firing off repeated requests, and never pay a third-party “recovery service” promising to speed it up.

What if the linked email or phone is also inaccessible?

If you’ve lost the email and phone on the account too, you can still get in through a device Facebook recognises or by verifying your identity, you’re not solely dependent on receiving a code.

Start by logging in from a device and location you normally use: Facebook’s systems recognise trusted devices and familiar locations and may let you confirm it’s you that way without a code. If that’s not possible, fall back to the government-ID verification covered above. Once you’re back in, the first thing to do is update your recovery details and review where you’re logged in, ideally in Accounts Centre (see below), so a future lockout has an easy route out. The old friend-based “Trusted Contacts” recovery is no longer available, so don’t rely on it; today the dependable safeguards are an up-to-date phone, a recognised device, and 2FA.

How do you recover a Facebook Business Page if you lose your personal account?

Facebook Pages are managed through a Meta Business Portfolio (formerly Business Manager) and the personal accounts that have admin access, so recovering a Page almost always starts with recovering the personal account that administers it. Regain the personal account and your Page access typically returns with it.

The route depends on the cause. If another person still has admin access, the quickest fix is for them to re-add you in Meta Business Suite under Settings then People. If you lost the Page because your personal account was hacked, recover that first at facebook.com/hacked, since Page access flows through it. And if you were the only admin and can’t get back in, use Meta’s Business Help Center “lost access” flow to request access to the business asset. The lasting safeguard is structural: always keep at least two admins on a Page and on the business portfolio that owns it, so a single lost personal account can never orphan it. Our guide to Facebook for business covers setting that up.

What is Accounts Centre, and how does it help recovery?

Accounts Centre is Meta’s single hub for managing your linked Facebook and Instagram accounts, your password, two-factor authentication, and recovery details all in one place, which makes it the best place to keep your recovery options current. Setting it up well is what turns a future lockout from a crisis into a two-minute fix.

It’s worth knowing this is changing: in April 2026 Meta began upgrading Accounts Centre into the “Meta Account,” a simpler way to access and manage your Meta apps and devices in one place, with a single optional password and passkey sign-in across apps, and Meta says existing Accounts Centre setups are updated to a Meta Account automatically over the year (Meta). Whatever it’s called when you read this, the action is the same: open it, confirm your recovery email and phone are current, turn on two-factor authentication and a passkey, and check your linked accounts, so that if you ever lose access to one, you have a verified route back in through the others.

How do you secure your account against future lockouts?

You secure your Facebook account by turning on two-factor authentication, enabling login alerts, keeping your contact details current, and using Facebook’s newer passkey sign-in. Prevention is far easier than recovery, and a few minutes of setup removes most of the risk.

The essentials, found under Security and login in your settings (now grouped in the Meta Account / Accounts Centre), are:

• Two-factor authentication (2FA). Requires a second step (an authenticator app or SMS code) on top of your password, so a stolen password alone can’t get someone in.
• Login alerts. Notify you of logins from unrecognised devices, your early warning that something’s wrong.
• Up-to-date email and phone. These are your recovery lifeline; keep them current and you keep the easy recovery route open.
• Passkeys. Facebook added passkey sign-in in 2025, letting you log in with your device’s fingerprint, face, or PIN instead of a password, a phishing-resistant option worth enabling (Meta, 2025).

A strong, unique password (12+ characters, stored in a password manager) underpins all of this. Run Facebook’s Security Checkup periodically to confirm these are in place. Together they make a lockout or hack far less likely, and far easier to undo if it happens.

Final thoughts

Recovering a Facebook account comes down to proving you’re the real owner: start with the “Forgotten password?” code to your email or phone, fall back to a recognised device or government-ID verification if needed, and use facebook.com/hacked for a compromised account. Ignore outdated advice like Trusted Contacts, and never trust a third-party recovery service.

The real lesson is prevention. Turn on two-factor authentication, enable login alerts, keep your email and phone current, and consider Facebook’s passkey sign-in. A few minutes of setup makes a lockout far less likely and far quicker to undo. Once you’re back in and secured, our guide to Facebook for business helps you make the most of the account.