Suspicious login alerts
An alert is a warning, and you still have time.
Stuck? Hand it to a recovery team and skip the guesswork.
We'll handle it for youFirst, is the alert real?
Check inside the app, not the email: Accounts Center, then Password and security, then Where you're logged in and Login alerts. Never click links in an alert you weren't expecting.
If it wasn't you
- Tap "This wasn't me" in the app.
- Change your password.
- Turn on authenticator 2FA.
- Log out all other sessions.
If it was you
New phones, travel and VPNs all trigger alerts. Confirm it was you and carry on.
More recovery guides
- Instagram hacked: the recovery checklist
- Facebook hacked: the recovery checklist
- Disabled, suspended, locked or hacked? How to tell
- No email, no phone: the recovery route
- Someone's in your account right now
- Username changed or account deleted
- Lock it down after recovery
- Two-factor authentication, done right
- Spotting recovery scams
- Fake Meta messages: how accounts get stolen
- Warn your followers
- Business assets after a hack
- WhatsApp hijacked: getting it back
- Your account emergency kit
- Prevention checklist
- Recovery FAQ
- Getting past "Confirm you're human"
- Getting the video selfie accepted
- Security code not arriving
- The hacker turned on two-factor
- Hacked, then disabled
- Facebook "Your account has been locked"
- Unknown account in your Accounts Center
- SIM swap: when your number is the weak spot
- Recover your email first