How to Get Your Instagram Account Back

The recovery route depends entirely on what happened, and the scenarios don't mix — the forgot-password form won't help with a ban, and an appeal is useless if your account was simply stolen. Quick navigation:

You know the login but forgot the password — the "Forgot password?" link on the login screen.
No access to your email or phone — a support request with identity verification, including a video selfie.
The account was hacked — the email-change notification in your inbox and instagram.com/hacked.
The profile is disabled — an appeal, in the app or through the form.
The account was deleted — log in within 30 days of the deletion request.

Below is each path in detail, plus what to do when the standard steps fail.

First, work out what actually happened

The symptoms look alike but the causes differ. Go by the signals:

"Incorrect password" — either a typo, or someone else changed it.
"User not found" — the username was changed, or the account was deleted or disabled.
A violation notice at login — a community guidelines action, with an appeal available.
No verification code arriving — a problem with your email or number, not with the account itself.
An email about a changed address or password — almost certainly a hack, and here every minute counts.

Forgotten password

On the login screen tap Forgot password?
Enter the username, email or phone number linked to the profile.
Choose how to receive the reset link — email or SMS.
Follow the link and set a new password.

If you ever linked Instagram to Facebook, try logging in through it — with an active link in Meta Accounts Center this is the fastest route, and it often works when the email is unreachable.

No email arriving? Check the spam folder, make sure you're entering the address you registered with, and wait a few minutes — repeated requests back to back sometimes slow delivery down.

No access to your email or phone

This is the most common hard case: the old inbox is abandoned, the number was released by the carrier. What to do:

On the login screen go to password reset and choose the option saying you've lost access to your contact details (the wording shifts between app versions — look for "Need more help" or a link to a support request).
Provide a current email address you can actually open.
The system will then ask you to confirm your identity. For accounts with your own photos this usually means a video selfie: a short clip turning your head to each side. It's matched against photos in the profile and never gets published.
For profiles without personal photos — brands, themed pages — you're more often asked for the original email or number used at signup, and sometimes the device type.

The answer arrives at the address you provided, usually within a few days. If you're rejected, resubmit from the same device and network you normally used to log in — that's an extra signal in your favor.

The account was hacked

Speed matters here more than anything else. As long as the attacker hasn't detached your email, there's a simple way back.

If you received an email-change notification

Find the Instagram email about the address change and click the link to revert it. That restores your previous address and usually locks the attacker out. The link is only valid for a limited time, so check your inbox immediately.

If there's no email, or the link didn't work

Open instagram.com/hacked and pick the matching option: password changed, access lost, someone impersonating you.
Go through identity verification — the same process as with a lost email.
Once you're back in, change the password, remove unfamiliar devices from active sessions, and turn on two-factor authentication.
Check linked accounts in Accounts Center and any third-party apps with profile access — sometimes the entry point was one of those services.

Check your mailbox separately: if the inbox itself is compromised, recovering Instagram without securing it first is pointless — the attack will simply repeat.

The account is disabled

You'll see a violation notice at login. There's usually an appeal button right there — use it, and don't create a new profile.

Describe the situation briefly and factually: when the account was created, what it's used for, why you believe the action was a mistake.
Don't fire off dozens of submissions — it doesn't speed up review.
The appeal window is limited after the action is taken, so don't put it off.
The decision comes by email. A first rejection isn't always final, but repeating the same appeal rarely changes the outcome.

Meta's policies get updated periodically, so the exact deadlines and wording in the interface may differ from what you saw before.

Deleted vs. deactivated accounts

The difference is fundamental:

Temporary deactivation — the profile is hidden but intact. Just log in with your credentials and everything comes back.
Deletion — this starts a delayed process. Under current rules you have roughly 30 days to log in and cancel it. After that the data is gone permanently, and not even support can bring it back.

If you can't remember which one you did, simply try logging in — it's safe and immediately shows the account's status.

Two-factor authentication is blocking you

The classic case: you remember the password, but the authenticator code is out of reach because the phone was lost or wiped.

Use the backup codes issued when you enabled two-factor protection.
Try logging in from a device where you were already authorized — it's often treated as trusted.
With neither available, you're back to the standard identity verification process.

Once you're in, save a fresh set of backup codes somewhere reliable — not in a chat, not in your phone's notes app.

What to do the moment you're back in

Set a unique password you don't use anywhere else.
Check the linked email and phone number — attackers routinely swap them.
End every unfamiliar session.
Turn on two-factor authentication, preferably through an authenticator app rather than SMS.
Revoke access for third-party apps you no longer use.
Review your posts and messages: intruders often leave links to scams behind.

Common mistakes

Hiring "account recovery specialists". Access can't be restored outside Instagram. These offers end in lost money or a second lost profile.
Entering credentials on third-party sites. Recovery happens only in the app and on instagram.com or facebook.com domains.
Creating a new account before appealing. The new profile can end up restricted alongside the old one.
Submitting requests from someone else's device over a VPN. An unusual location and device make verification harder.
Ignoring your inbox. Every critical message — the email-change reversal, the appeal decision — lands there.

If the account can't be recovered

It happens: the email is gone along with the number, there were no photos of you for a video selfie, and the appeal was rejected. At that point it's more realistic to stop fighting and gather what's left — saved post links, audience contacts on other channels, your content archive on disk.

For a personal blog, starting a new profile is usually enough. For a commercial account where downtime costs money, some of that gap gets covered with existing profiles — Instagram accounts with history, for instance — so promotion doesn't restart from zero. The same rule applies to any such profile: change the password, attach your own email and switch on two-factor protection right away.

FAQ

How long does recovery take?

A password reset takes minutes. Video selfie verification and appeals are typically reviewed within a few days; Instagram doesn't guarantee exact timelines.

Can I get the account back if someone else took over the username?

Attackers often change the username after a hack. Recovery is tied to the account itself rather than the handle, so file through instagram.com/hacked and state the old username.

What if the video selfie keeps failing?

Record it in good light, without glasses or hats, following the on-screen movements exactly. A retry usually becomes available after a while.

Do posts and followers survive recovery?

Yes, provided the account wasn't permanently deleted. The whole profile returns — posts, followers and messages included.

Can support help if more than 30 days have passed since deletion?

No. A permanently deleted account can't be restored.

How do I tell whether an email from Instagram is genuine?

The app keeps a log of its own messages under security settings → Emails from Instagram. If a message isn't on that list, it's fake.

Should I unlink Facebook if I suspect a hack?

Don't rush — that link is often the only way back in. Secure the Facebook account itself first and change its password.

In short

Start with the diagnosis: a forgotten password is a two-minute reset, a hack is the email-reversal link plus instagram.com/hacked, a disabled account is an appeal, and a deleted one is a login within 30 days. When your contact details are gone, identity verification is what's left — and your odds improve if you do it from your usual device, without rushing. Then spend five minutes on two-factor protection, which is cheaper than going through recovery a second time.