A hacked TikTok account may show changed profile details, strange posts, messages you did not send, or a password that no longer works. The sooner you cut off devices and reset the password, the less cleanup you will have to do.
Does this affect you?
Use this for TikTok on iPhone, Android, or desktop browser when profile settings or activity changed without you, or when someone changed the password before you could sign in.
If you can still log in
Lock down the account before investigating every change.
- Open TikTok and tap Profile.
- Open the menu and go to Settings and privacy > Account.
- Tap Password and set a long, unique password not reused elsewhere.
- Go to Settings and privacy > Security and permissions > Manage devices.
- Log out any phone, browser, or location you do not recognize.
- Check profile photo, username, bio, linked email, and phone number, and restore anything the attacker changed.
- Delete posts, comments, or direct messages you did not send.
If you are locked out
Use the original login method first, then escalate if contact details were changed.
- On the TikTok login screen, choose Log in and select the method you originally used, such as phone, email, Google, or Apple.
- Tap Forgot password and request a reset code to the phone or email on file.
- Enter the code and set a new password.
- If the attacker changed both contact methods, choose Need other help if shown.
- Use TikTok Help Center’s Report a hacked account option from a browser if the app flow cannot verify you.
- Be ready to provide details such as original username, sign-up date, previous passwords, or linked account information.
- After recovery, manage devices and turn on 2-step verification.
More control
Enable 2-step verification
Settings and privacy > Security and permissions > 2-step verification lets you use text, email, or an authenticator app. This keeps a stolen password from being enough.
Review login activity
TikTok shows recent login location and device details. Unfamiliar logins confirm a compromise and justify changing the password again after cleanup.
Use unique passwords
Reused passwords from unrelated breaches are a common cause of takeovers. A password manager makes unique TikTok credentials easier.
Avoid fake ban warnings
Messages saying your account will be banned unless you verify through a link are phishing. TikTok will not ask for your password or code through a message link.
Sources
- TikTok Support Center – My account was hacked (2025)
- TikTok Support Center – How to reset your password (2025)
- TikTok Support Center – Two-factor authentication (2025)