# How to Recover a Hacked TikTok Account: First Steps > TikTok hacked and locked out? Secure your email, use Recover your account in the app, and avoid recovery scams that follow a takeover. - URL: https://www.awarexone.com/research/how-to-recover-a-hacked-tiktok-account-first-steps - Author: Md Shariar Shanaz Shuvon, Founder & CEO, AwareXone - Published: 2026-11-09 - Topics: TikTok, Account recovery, Malaysia - Related service: TikTok account recovery: https://www.awarexone.com/social-media-recovery/tiktok-account-recovery ## Short answer If TikTok is hacked, secure your email and phone first, then try Forgot password or the in-app Recover your account flow. Warn contacts from another channel. Never share login codes with anyone. Only TikTok can reinstate the account for you. ## Summary - Check your email before anything else. If the password or email on the account just changed, TikTok sometimes lets you undo it directly from a security alert. - If you cannot log in at all, go to the in-app Recover your account flow and choose the option that matches your situation: hacked, forgot password, or lost two-factor access. - Secure the email account linked to TikTok first, since whoever controls that inbox can reset TikTok again even after you recover it once. - Warn your contacts through a channel the attacker does not control, since hacked accounts are often used to message followers asking for money. - Never share your password, a login code, or a backup code with anyone claiming to help, including someone claiming to be AwareXone. - TikTok decides the outcome. Some accounts come back within a day, some take longer, and some are not restored. You open TikTok and the password does not work. Or it still works, but your bio, your email and your posts have changed. Either way, someone else is likely in control of the account right now, and the first ten minutes decide how much damage they do before you get it back. You can still act, even without being logged in. TikTok built a dedicated hacked-account flow for exactly this, and your email account matters just as much as TikTok itself. This guide walks through the first steps in order, what to avoid, and what happens next. Last checked: 9 November 2026. ## Quick Answer Check your email first for a security alert about a changed password or email address; TikTok sometimes lets you undo the change directly from that message. If you cannot log in at all, go to the in-app Recover your account flow on your phone or a browser and choose the option that matches your situation. Secure the email account linked to TikTok too, since the attacker can use it to lock you out again. Warn your contacts through a different channel, since a hacked account is often used to message followers asking for money. Nobody outside TikTok, including AwareXone, can reinstate the account for you. ## The First 10 Minutes 1. Open the email inbox linked to the TikTok account and look for a recent security alert about a password or email change. Do this before trying anything else in the TikTok app. 2. If you can still log into TikTok, change the password immediately, then go to Settings and log out of all other sessions. 3. If you cannot log in, go to the in-app Recover your account flow in a browser or the app and select the option closest to your situation: a hacked account, a password problem, or a lost two-factor device. 4. Do not try several password guesses or repeatedly hammer the login screen; that can trigger TikTok's automated abuse protections and slow down your own recovery. 5. Check whether TikTok is showing you a disable or suspension notice rather than a normal hacked-account flow. If so, that is a different process; see our guide to [a disabled TikTok account](https://www.awarexone.com/research/tiktok-account-permanently-banned). ## The Next Hour 1. Secure the email account itself: change its password, check for forwarding rules you did not set, and sign out of sessions you do not recognise. 2. Check your phone for an unexpected no service message, which can mean a SIM swap rather than a simple password compromise, and call your carrier if so. 3. Complete any identity check TikTok's recovery flow asks for, which can include a short video selfie, only inside the official the in-app Recover your account flow flow, never through a link sent to you by someone else. 4. Record what you know about the account: the username, the email and phone it was created with, roughly when you created it, and the device you normally use. 5. Screenshot anything the attacker changed or posted, with visible dates and times, in case you need it for an appeal later. ## Warn Your Contacts Hacked accounts are often used to message followers asking for a loan, a code, or a click on a link. Warn people through a channel the attacker does not control, such as a text message or a different app, rather than relying on the compromised TikTok account itself. - Tell close contacts directly that the account was taken over and not to trust requests for money or codes from it. - If the account runs a business, consider a short, calm post on another platform you still control. - Keep a record of any messages the attacker sent, since they may be useful evidence later. ## What Not to Do - Do not pay anyone who contacts you offering a fast recovery for a fee. TikTok's help page on phone support says plainly that TikTok has no general public customer service phone number, and that numbers claiming to be TikTok support are potentially scams. - Do not share your password, a login code, a backup code, or a video selfie with anyone outside the official TikTok app or website, including someone claiming to work for a recovery company. - Do not create a replacement account while recovery is in progress. TikTok's Account Integrity policy allows it to restrict accounts created to evade enforcement or owned by the same person as a disabled account, so a new account can complicate the original case. - Do not ignore an identity check request inside the official flow out of caution; it is one of TikTok's standard steps, not a sign something has gone wrong. > Warning: **Recovery scammers target people right after a hack.** Fake TikTok Support pages and unofficial recovery sellers look specifically for people who have just lost an account. Real TikTok recovery happens inside the TikTok app or at the in-app Recover your account flow. Nobody needs your password or a login code to help you, not even AwareXone. ## If Nothing Works Through the Normal Flow TikTok does not publish a fixed timeline for hacked-account cases, and some require more than one attempt through the flow. If the account was also disabled because of what the attacker did with it, you may need to go through both an identity check and a disable appeal; our guide to [a disabled TikTok account in Malaysia](https://www.awarexone.com/research/tiktok-account-permanently-banned) covers that combination. If you are not sure the account can still be reached at all, our guide to [losing access to your email, phone or 2FA](https://www.awarexone.com/research/lost-email-phone-2fa-account-recovery) covers the fallback routes. ## When Professional Help Makes Sense Many people recover a hacked TikTok account on their own using the steps above, and this guide is written so you can do exactly that. A second opinion helps when the account supports your income, when a hack and a disable notice are tangled together, when the attacker changed the email and phone and recovery keeps failing, or when you are not sure which official route still applies. SocialSafe by AwareXone, our recovery service, reviews the account and what has already happened, then tells you plainly whether an official route is still open. Our [TikTok account recovery service](https://www.awarexone.com/social-media-recovery/tiktok-account-recovery) explains how that review works, and our [Trust Center](https://www.awarexone.com/trust) sets out what we will never ask you for. ## Frequently Asked Questions ### What is the very first thing to do if TikTok is hacked? Check your email for a security alert about a password or email change before trying anything inside the TikTok app. If one exists, it may let you undo the change directly, which is faster than starting a recovery request from scratch. ### How do I use the in-app Recover your account flow? Open it on a phone or desktop browser, choose the option matching your situation, such as a hacked account, a forgotten password, or lost two-factor access, and follow the on-screen steps, which can include an identity check. ### Why do I need to secure my email too? Whoever controls the email account linked to TikTok can reset the TikTok password again, even after you recover it once. Securing the email first stops the attacker getting straight back in. ### How long does hacked TikTok account recovery take? TikTok does not publish a fixed timeline. Some accounts are restored within a day, others take longer, and some cases also involve a separate disable appeal that adds time. ### Is it safe to complete a video selfie check during recovery? Yes, if the request appears inside the official TikTok app or at the in-app Recover your account flow. Never record one for someone who contacted you by message, email or a third-party link. ### Can AwareXone get my hacked TikTok account back immediately? No one outside TikTok can reinstate an account, and no outcome is promised. SocialSafe by AwareXone reviews your case, checks whether an official route is still open, and helps you prepare an accurate request. We never ask for your password or codes. ## Official sources - [TikTok: Hacked account support, the in-app Recover your account flow (read 9 November 2026)](https://www.the in-app Recover your account flow/) - [TikTok Help Center: About disabled TikTok accounts (read 9 November 2026)](https://help.tiktok.com/366993040048856) - [TikTok Transparency Center: Account Integrity, Community Standards (read 9 November 2026)](https://www.tiktok.com/community-guidelines/en/policies/community-standards/account-integrity) - [TikTok Help Center: Phone support availability on TikTok Company Products (read 9 November 2026)](https://www.meta.com/help/policies/23938634512490588/) - [MyGOV: NSRC 997 Hotline (read 9 November 2026)](https://www.malaysia.gov.my/en/categories/safety-and-community/cybersecurity/nsrc-997-hotline) --- AwareXone is an independent provider serving clients worldwide, not affiliated with any platform. The platform makes the final decision on every account. AwareXone never asks for passwords, OTP codes, backup codes or session cookies.