Facebook Page recovery starts by establishing what was lost: the Page itself, the only personal profile able to manage it, or administrator access that remained with a former employee. Never give anyone a password, two-factor code or backup code. We never ask for those details either. Preserve the facts, review the remaining roles and use Meta's official route for a compromised Page.
Facebook Page recovery: establish the scenario first
Sign in through a person who is still a legitimate administrator and open Page access in the Page settings. For assets managed through a business portfolio, also review Business settings: Accounts, Pages and the people with access. Accounts Center can help review linked personal accounts and their security, but it does not replace checking access to the Page itself.
- The Page is visible, but an unfamiliar person has been added or your people were removed. Capture Page access, names, access levels, recent posts and the Page URL. If another administrator has full control, they should keep passwords private and remove unfamiliar access in the settings when the platform permits it.
- The only administrator lost their personal Facebook profile. Secure the email attached to that profile first and follow the official route for the personal profile; see our steps for a hacked Facebook profile. Another active administrator should protect the Page and advertising assets and avoid adding random people.
- A former employee or agency still holds the only working administrator role. The cause may be a gap in handing over the assets. Gather the contract, handover correspondence, invoices and company details, then explain the missing role clearly in the official request.
- A restriction notice appears rather than simply missing permissions. Identify the affected asset: Page, personal profile, business portfolio or ad account. Read our guide to types of restrictions and do not assume that every restriction is a takeover.
When the only administrator's personal profile was taken over
This is the highest-risk version because whoever controls the personal profile may change roles, publish posts and alter Page settings. If you are still signed in on a familiar device, check Settings & privacy, then Password and security, end unfamiliar sessions and change the password. Then type facebook.com/hacked into the browser yourself instead of following a link in email or chat.
Check old mailboxes, including Spam, for notices about a new login, changed email or changed phone number. Save genuine messages and the date of the change. Do not try dozens of passwords or submit uncoordinated requests through other profiles: that does not establish that you are the rightful holder.
Where a second administrator exists, that person should document the current state and check whether ads are paused, redirected or spending money. For role structure, a backup administrator and business assets, see our business support. Once personal access is restored, review the people, partners, connected apps and levels of Page access.
Start with the facts. Check whether the Page sits in a separate business portfolio, who is shown as its owner, which people have full control and whether you have an internal record of invitations. Sometimes the owner has access but signed in through a different personal profile; at other times the access really was left only with an external contractor.
Prepare a short timeline: when the Page was created, who managed it, when the working relationship ended and when the missing access was discovered. Attach only evidence relevant to your connection with the business: registration documents, a business domain with contact details, trademark documents, a contract or invoices for Page work. Do not send documents to people commenting as “Meta support”.
Where the dispute concerns a former employee or agency, a platform form does not automatically decide ownership. Use it to describe the unauthorised access change. Keep the correspondence, and do not buy administrator profiles from other people to compensate for the missing access.
The official request and business evidence
For a Page you believe was compromised, use the official flow for a hacked Facebook Page. Open it through the Help Center or by typing Facebook's address yourself, so a phishing copy does not intercept the request. The form may ask for the Page URL, business name, a description of the change and documents supporting the claim.
Before submitting, organise the following:
- The Page URL, its exact address and screenshots from before and after the change.
- Names and work email addresses of people with legitimate roles, plus the dates of their access or departure.
- Company registration, trademark document, domain and official contacts where they match the business name.
- Receipts, invoices or ad-payment history where they establish the asset timeline. They support the official request and can make the record clearer.
The description works best when it is brief: which access disappeared, when, who was affected and what evidence is attached. Do not promise an outcome to clients or pay an intermediary claiming to have an internal contact. If the official route has ended without clarity or the asset has significant business value, a diagnostic review can help organise the case. Meta makes the decision.
When ads on the Page are spending money
Check Ads Manager for active campaigns, unfamiliar ad accounts, changes to payment methods or spending after the date access was lost. Keep screenshots, amounts, dates, transaction references and notices from the bank. For an unauthorised card payment, contact your bank through its official number as soon as possible and follow its charge-dispute process.
Avoid adding new cards to “unlock” the Page or opening a series of new ad accounts. That can make the asset history harder to understand. For the advertising issue itself, read what to do with a restricted ad account. Our support guide covers the broader contact route.
Official sources
Checked on 23 October 2026.