Recover TikTok through official account help. If you can sign in, change your password and remove unfamiliar devices; document any changes to email or phone.
Related security concepts: phishing.
TikTok lists device removal under Security & permissions, then Manage devices. It also describes recovery through verification by connected friends when that option is offered. See TikTok account-safety instructions.
Start with containment
| What you can still do | Do this first | Why |
|---|---|---|
| You can still log in on at least one device | Change password, review security settings, and end unknown sessions. | Password changes without session cleanup often fail. |
| You are locked out (email or phone changed) | Use TikTok's official reporting and support flows, then secure the inbox and phone number you use for recovery. | The recovery channel decides whether access sticks. |
| Your account is posting scams | Warn contacts not to click links, then focus on regaining access and removing persistence. | Attackers exploit your trust graph while you are distracted. |
| You clicked suspicious links or installed unknown apps before the takeover | Assume device compromise and clean the device before re-entering credentials. | Infostealers can re-take accounts after password resets. |
Safety note: do not trust "TikTok support" DMs or phone numbers in comments. Use in-app support and official TikTok pages only.
If you can still log in
1) Change your password from a known-good device
Use a unique password stored in a password manager. If you reused this password anywhere else, rotate those passwords too.
2) End unknown sessions and remove unknown devices
Look for logged-in devices you do not recognize and sign them out. If sessions keep coming back, assume the control plane (email/device) is still compromised.
3) Check recovery methods and enable stronger authentication
Confirm your email and phone number are correct, then enable TikTok's available security features. Avoid SMS-only security for high-risk accounts when possible. If you are seeing repeated prompts or notifications, treat it as an active attack: MFA fatigue (push bombing).
4) Remove persistence
Review connected apps and any settings that allow third-party access. Attackers often leave a hidden access path that survives password changes.
If you are locked out
TikTok support surfaces vary by region and change over time, so avoid unofficial lists of email addresses. Use official entry points and in-app reporting.
1) Use in-app "Report a problem" and help flows
When possible, start inside the app. In-app reporting is tied to your device and account context and is less likely to send you to scams.
2) Use TikTok's official feedback form
TikTok provides a feedback/reporting form here: tiktok.com legal feedback. Use it to report account access issues and include your evidence pack.
3) Follow TikTok's guidance for phishing and account abuse
For current security settings and device removal, use TikTok's account-safety instructions linked above. Only follow verification options shown in the official app or support process.
4) Secure the control plane before you retry recovery
If recovery codes or notifications are going somewhere you do not control, stop and secure the inbox and phone number first. If your inbox is compromised, the attacker can intercept recovery links. If your device is compromised, the attacker can steal sessions again.
If your takeover involved suspicious downloads or browser extensions, treat it as malware until proven otherwise. Start with infostealer malware and use how to check if your phone is hacked to validate the device.
Keep a record for recovery and follow-up
Keep username, linked contact changes, unknown devices, unauthorized videos, and the recovery options shown in the app. Record dates, times, and what you actually did. Separate confirmed events from the other person's claims, and retain original files alongside screenshots.
If this involved a scam, you can organize the evidence in a Scam Incident Record. Keep the relevant messages and transaction details together for reporting and follow-up. You review and send information to the appropriate organization yourself; creating a record does not submit an official report or guarantee recovery.
If you need help with the account-access problem, review the account recovery help options. The provider still decides account ownership and reinstatement.
Leave passwords, login codes, backup codes, and private keys out of incident notes or reports. Submit identity documents only when the verified official recovery process requires them.
After you regain access: harden so it stays recovered
- secure the email account and phone number that anchor recovery
- enable TikTok security features and keep recovery methods current
- remove unknown sessions, devices, and third-party access
- use unique passwords and avoid credential reuse
Use how to secure your TikTok account as the follow-on hardening checklist.
TikTok recovery is rarely a single form. It is incident response: contain access, use official reporting, and remove persistence. When you focus on the control plane, you stop the loop where attackers re-enter after every reset.
The goal is to end unauthorized access. Strong recovery channels, clean devices, and reliable session revocation are what turn a takeover into a bounded event instead of an ongoing risk.
Over time, your best defense is simple: protect the inbox, protect the number, and do not let urgent messages choose the channel. Those habits reduce takeover risk and preserve recovery options.