Your friends are messaging you about strange DMs you never sent, you got a login alert from a country you have never visited, and the password that worked yesterday suddenly gets rejected. That sick feeling is real, but so is the recovery path. If the attacker has not yet locked you out completely, you can often take your TikTok account back in minutes, and even when they have changed your details there is an official route designed for exactly this situation. Work through the sections below in order, starting with the fastest fixes, and stop as soon as one gets you back in.
One ground rule before you touch anything. Start your recovery on a device, browser, and network you have actually used to sign in to TikTok before. A recognized device and a familiar location make every verification step smoother and less likely to trip extra security checks. Avoid borrowing a stranger's phone or a public computer for this.
Confirm the Compromise and Move Fast
Quick confirmation matters because the longer an intruder sits in your account, the more likely they are to change your recovery email or phone number and lock you out for good. Treat unsent posts, DMs you did not write, a changed username, or a password that no longer works as a genuine compromise rather than a glitch.
The single most important factor is whether you still have any access. If you can still open the app while logged in, jump straight to changing your password before the attacker changes your recovery details. If you are already locked out, the password reset and the official report flow further down are your routes back in.
While you work, keep one rule absolutely firm. Never share a verification code, your password, or a two-step verification code with anyone. Real TikTok support will never ask you for any of those. Attackers commonly pose as "support" or as a worried friend to talk a code out of you, and handing it over is often the exact thing that lets them finish stealing the account.
Change Your Password and Log Out the Intruder
If you can still get into the account, change the password right away. A new, strong, unique password locks the intruder out before they can alter your recovery email or phone number, which is the move that turns a quick fix into a long ordeal.
- 1.Open TikTok and go to your Profile.
- 2.Open the menu and select Settings and privacy.
- 3.Go to your account and password settings and update the password to a strong, unique one you have not used elsewhere.
Pick something long and unrelated to your other logins. If the same password protects your email, change that too, because an attacker who has your TikTok password will try it everywhere. Once the new password is saved, the intruder's existing session should no longer hold up against the changed credentials.
Reset Your Password From the Login Screen When You Are Locked Out
If your password no longer works, the fastest route back in is a reset, and it works as long as the attacker has not yet changed the email or phone number linked to your account. The locked-out path runs through the "Forgot password?" flow.
- 1.On the TikTok login screen, choose to log in with your phone, email, or username.
- 2.Tap "Forgot password?".
- 3.TikTok sends a reset code or link to the email or phone number still linked to your account.
- 4.Use it to set a new password, then sign in.
This is the fastest official route, but it only works if you still control the linked email or phone. That is exactly why keeping access to at least one of those channels matters so much. A code sent to your linked phone, email, or authenticator app is what lets you complete a "Forgot password?" reset and log back in. If the reset code never arrives because the attacker swapped your recovery details, move on to the official report flow below.
Submit a Report a Problem Request When Reset No Longer Works
When a standard reset fails, for example because the hacker changed your linked email or phone, use TikTok's in-app feedback flow, called Report a problem. This is the official escalation path for a compromised account that you can no longer reset yourself.
- 1.Go to your Profile.
- 2.Open the menu and tap Settings and privacy.
- 3.Tap Report a problem.
- 4.Tap Account and profile, then Login.
- 5.Provide accurate account-ownership details when prompted.
If you are fully locked out and cannot reach this menu from your own account, you can run this flow from another device. Importantly, do not create a brand-new account just to report the hacked one. If you do use another device or account to reach the form, you are simply using it as an access point, and the ownership details you provide are what tie the request back to your real account. Give honest, accurate information so TikTok can match the request to you.
Find the Official Hacked-Account Entry Points
TikTok's Support Center hosts the official starting points for escalating a compromised account when self-service reset fails. There is a dedicated Report a problem page, a dedicated hacked-account article filed under login troubleshooting, and a Safety Center hacked-account resource. These are the pages to use rather than anything that arrives in a random DM or text message.
Before you enter credentials or upload any identifying details, confirm you are on the genuine official domain. The verified support locations are support.tiktok.com and www.tiktok.com, including pages such as support.tiktok.com/en/log-in-troubleshoot/log-in/my-account-has-been-hacked, support.tiktok.com/en/log-in-troubleshoot/log-in/reset-password, support.tiktok.com/en/safety-hc/report-a-problem, and www.tiktok.com/safety/resources/hacked-account. A page that looks like TikTok but sits on any other domain is a phishing trap, so close it and navigate to the official address yourself.
One more safeguard for this stage. Do not pay any third-party "account recovery service." These services cannot do anything you cannot do yourself through the official flows above, and handing over your details or money to them only adds a second party who can misuse them. The official Report a problem and Support Center pages are free.
Turn On Two-Step Verification to Lock the Account Down
Once you are back in, the priority shifts from recovery to prevention. Two-step verification (2SV) is the single change that stops a repeat takeover, because it requires a code at login on any new or unrecognized device, even if someone has your password.
- 1.Go to your Profile.
- 2.Open the menu and select Settings and privacy.
- 3.Open your security settings and tap Two-step verification.
- 4.Set up at least one method from Phone (SMS), Email, or Authenticator app, such as Google Authenticator or Microsoft Authenticator.
TikTok recommends enabling more than one method, so that if you lose access to one channel you can still verify with another. That redundancy is what protects your future "Forgot password?" resets too, since those resets depend on you controlling at least one linked channel. After setup, the verification code is required at login on a new or unrecognized device, while trusted devices you choose to remember can skip the prompt.
As you finish locking down, keep the same discipline that got you here. Never read a 2SV code aloud or paste it to anyone who asks, no matter how official they sound. The code is the last line of defense, and the genuine recovery flow never requires you to give it to another person.
Frequently Asked Questions
How Long Does TikTok Take to Recover a Hacked Account?
TikTok does not publish an official recovery or support-ticket timeline, so any specific number of hours or days you see elsewhere is not authoritative. The fastest outcome by far is a self-service "Forgot password?" reset, which can return access in minutes if your linked email or phone is still intact. The Report a problem flow is the route when that fails.
What If the Hacker Changed My Email and Phone Number?
When your linked recovery details have been changed, a standard password reset will no longer reach you, so use the in-app Report a problem flow. From your Profile, open Settings and privacy, tap Report a problem, then choose Account and profile and Login. Provide accurate account-ownership details when prompted so TikTok can verify the account is yours.
Should I Make a New Account to Report the Hacked One?
No. Do not create a brand-new account to report the compromise. If you are locked out, you can reach the Report a problem flow from another device you trust, and it is the ownership details you submit, not a new account, that connect the request to your real profile.
Is It Safe to Share a Verification Code With TikTok Support to Prove I Own the Account?
No. Never share a verification code, your password, or a two-step verification code with anyone, including someone claiming to be support. Real support never asks for these, and giving a code away is a common way attackers complete a takeover.
Does TikTok Give Me Backup Codes for Two-Step Verification?
TikTok's official two-step verification settings confirm three methods for the consumer app, which are Phone (SMS), Email, and Authenticator app. The best safeguard is to enable more than one method so you can verify through a second channel if you lose access to the first, rather than relying on any single one.
Should I Pay a Service That Promises to Recover My TikTok Account?
No. A paid third-party "account recovery service" cannot do anything beyond the free official flows, and sharing your details with one only creates a new risk. Stick to the "Forgot password?" reset, the in-app Report a problem flow, and the official Support Center and Safety Center pages.
