← All parenting guidesCybersecurity
Practical digital parenting · Cybersecurity

My Child’s Social Media Account Was Hacked — What Should We Do First?

How do we stop the attacker and recover the right account?

FamilyAtlas editorial team · Published · Last updated 2026-09-30 · Last verified 2026-09-30

Jump to a section
The short answer

Do this first

  1. Open the affected provider’s official recovery guide below on a trusted device.
  2. Secure compromised email that receives reset messages.
  3. Recover access and review sessions and recovery contacts.
  4. Warn contacts about unauthorized scam messages.
  5. Use child-protection help as well if threats or exploitation occurred.

Use a trusted device and the affected platform’s official recovery route. If the email account that receives password resets is compromised, secure that first or alongside urgent account containment. A password change alone is not the whole job: review active sessions, recovery contacts, connected accounts and unauthorized posts or messages.

Instagram, TikTok and Snapchat have different signed-in and locked-out workflows. Do not follow a recovery link sent by a stranger, pay an “account recovery hacker” or give away verification codes. Keep appropriate incident details and warn contacts privately if the account sent scam messages. If software or a browser extension may be compromised, use a known-clean device for recovery and arrange cleanup rather than entering fresh passwords on the suspect device. For threats or exploitation involving your child, use safeguarding help in addition to account recovery. FamilyAtlas does not recover third-party accounts.

FTC: How To Recover Your Hacked Email or Social Media Account · Meta: Making it easier to access account support on Facebook and Instagram

The parent concern

Access recovery is only part of containment. Reset channels, active sessions and linked accounts can remain relevant after the child gets back in.

Source information and practical suggestions

Contain the route back in

Use FTC guidance for hacked email/social accounts: recover through the service, update credentials and review recovery details. If malware is suspected, use a known-clean device and clean up the affected device before recovering accounts on it. Review account sessions and connected apps; notify contacts about unauthorized scam messages without forwarding the scam link.

FTC: How To Recover Your Hacked Email or Social Media Account

Source information and practical suggestions

Instagram: start with official access recovery

Use instagram.com/hacked or Instagram’s official account-access support. Meta’s current support experience varies by rollout and account-access situation; an AI support assistant or particular identity check is not guaranteed to appear for every family. Follow the recovery branch for the actual problem, including changed email/phone details, rather than submitting an impersonation report for a takeover.

Meta: Making it easier to access account support on Facebook and Instagram

Source information and practical suggestions

TikTok: distinguish signed-in security from lost access

If still signed in, TikTok documents Profile > Menu > Settings and privacy > Account > Password. Its suspicious-device review is Settings and privacy > Security & permissions > Manage devices. Review the phone/email details too. If locked out or the recovery details were changed, use TikTok’s official account-access support; the signed-in password menu is not a complete recovery solution.

TikTok: My account has been hacked

Source information and practical suggestions

Snapchat: reset, then review contacts and sessions

Snapchat directs compromised accounts to its official password reset and support route, and asks users to verify the correct email and mobile number. Review Session Management for unfamiliar sessions; termination may take time. Never share the password or My Eyes Only passcode with anyone claiming to be support.

Snapchat: My account is compromised · Snapchat: Manage devices signed into Snapchat

Practical family strategy

After access returns

Check linked accounts, posts, messages, recovery details and available MFA. Protect reused passwords on other accounts. Keep case references and tell the school if its account/device was involved. Do not assume recovery removes copied content, restores money or proves that no private messages were accessed. Seek safeguarding help for threats or exploitation.

Start here

What you can do right now

  1. Use a trusted recovery device.
  2. Protect compromised recovery email.
  3. Use the platform’s official recovery flow.
  4. Review sessions, contacts and linked accounts.
  5. Warn contacts and enable available MFA.

A way to start the conversation

“Thank you for telling me. Let’s protect the account and anyone who received a message from it; we can discuss how it happened afterwards.”

A suggested script to adapt, not a clinical intervention.

What technology cannot solve

FamilyAtlas cannot recover Instagram, TikTok or Snapchat accounts, revoke their sessions or guarantee that copied content disappears. A provider may require further verification.

Questions parents ask

Should I pay someone who promises recovery?

No. Use official provider support, not a recovery hacker or a contact asking for codes.

Is changing the password enough?

Also review sessions, recovery contacts, linked apps and account activity, and address device compromise if suspected.

Can I use the same recovery steps for every platform?

No. Use the actual platform’s signed-in or locked-out workflow.

Sources and review

Provider documentation explains settings and eligibility. Professional guidance provides context, while our suggested family strategies are labeled separately. FamilyAtlas claims were checked against implementation, with release limits stated above.

Next source review: 2026-12-30. Menus, eligibility and rollouts can change; follow the linked provider instructions if your screen differs.

Written by FamilyAtlas; product descriptions are not independent product recommendations. No claim of medical or psychological review is made.