When a page or shop account is hacked, everything stops at once: posts, customer messages and any ads still running. Most cases are not clever hackers. They come from reused passwords, fake links or a former admin who can still get in. This is a checklist you can finish in 20 minutes.

Common incidents for pages and shops

The usual causes behind page and shop trouble tend to be the basics below, not anything complicated.

Turn on 2-step on every platform

2-step, or two-factor authentication, means a second check when you log in from a new device. Even if someone knows the password, they cannot get straight in. Do one platform at a time.

1. Turn it on in Facebook

   Per Facebook's help page: click your profile picture, choose Settings and privacy, then Settings, open Accounts Center, choose Password and security, then Two-factor authentication. Pick the account, choose a method such as an authentication app, SMS or a security key, and follow the screen.

2. Turn it on in Instagram

   Open Accounts Center, then Password and security, choose Two-factor authentication and pick the account. Instagram offers SMS, an authentication app and a security key; the app is the recommended method.

3. Turn it on in TikTok

   Go to your profile, tap the menu, choose Settings and privacy, then Security and permissions, then 2-step verification. Pick at least two methods such as phone, email or an authenticator app, and turn it on.

4. Keep backup codes

   Facebook and Instagram give backup codes for when the phone is lost. Keep them away from the same phone, for example on paper in a safe place or in a password manager.

Menu names can change after an app update and some accounts see different screens. If you cannot find it, search 2-step in that app's help center.

Who may do what: an admin permission table

The rule is to give only what the job needs. A helper who answers chat does not need to delete the page or add admins. Role names differ by platform, and Meta adjusts its page permission system from time to time, so check your real page settings. This table is a principle, not fixed role names.

Never share your password, including with outside services

This is the same rule we stress in what is pum fol and is it safe and the service choosing checklist: never send your password to anyone, whether a friend, a helper, an agency or a growth service.

A password opens everything. Whoever has it can change the email and phone to take the account, and the platform cannot tell who logged in. The safer option is to grant access through roles, or to use a service that does not need a password. Instafollow services need only a public profile link or post, no password. Check each service's details before ordering.

Warning signs of phishing emails and links

Phishing is a message that tricks you into typing a password or code into a fake page. Check these 6 signs before you click.

If unsure, do not click. Open the app yourself and look at notifications or the help center. If it is real, the message will be there too.

If the account already has a problem: the first 10 steps

Go in order and do not panic and click everything at once.

1. Get into the account first

   If you can still log in, change the password at once to one you have never used elsewhere.

2. Sign out of all devices

   Choose to log out everywhere, then remove unknown devices from the login list.

3. Check the email and phone linked to the account

   Intruders often change these two. If changed and a notice reached your old email, use the link in it to undo the change, or start the app's recovery flow.

4. Turn on or reset 2-step

   Set it up again with an authentication app on a safe device.

5. Check admins and connected apps

   Remove unknown admins and apps linked to the page that you do not use.

6. Check ads and payment methods

   Stop ads you did not create and look for strange charges.

7. Delete posts and messages that are not yours

   Then post a short notice asking customers not to click links sent from the page in that period.

8. Report through the platform's help center

   Use the app's official channel. If you cannot log in, use the app's account recovery flow.

9. Change reused passwords elsewhere

   Especially your main email and accounts tied to the shop.

10. Write down what happened

    Note dates, times, messages you saw and what you changed, in case you need them when you contact the platform.

Back up customer data and content

If the account disappears for a while, the shop must still be able to reach customers. Keep a copy outside the platform.

Once the setup is done, you can add followers and views. A safe account keeps what you have built from disappearing on the way. See password-free options at Instagram followers and Facebook page likes. Priced per 1,000 with PromptPay payment. A higher count does not replace real customers and does not make your account safer.

Before choosing any service, use the service choosing checklist before you pay.

ArticleHow to Choose a Followers/Likes Service: 8-Point ChecklistBefore paying for followers, likes or views, what should you check? An 8-point checklist covering passwords, price per 1,000, support, and how to test with a small order first.

ArticleFollower Boosting: Is It Safe, and Is a Password Needed?How does follower boosting work, do you have to share a password, what are the real risks, and can the count drop? A plain explanation of what a service needs from you and how to lower the risk.

FAQ

Summary

Turn on 2-step, review managers monthly, send your password to no one, not even a helper or an outside service, be wary of links that rush you, and keep customer contacts outside the platform. It all fits in one evening, then repeat the check once a month.