Instagram Hacked Recovery Lab: The First Hour
The password stops working. A friend asks about a link you never sent. What do you do first? Live the first hour after a fictional Instagram takeover, make the calls and see what each one saves or costs. Need the steps for a real account right now? Read Instagram hacked: what to do in the first hour.
You are Priya Nair, who runs the Instagram account for Marigold Candle Co, a small shop. Your login stops working and friends start to message you. Across 11 decisions you live the first hour after the takeover. Everything here is fictional: the people, the shop and the addresses. Each call is scored 0 to 10, with the reason and the official guidance behind it. Menu names in the real app change, so the lab teaches the order and the goal of each step.
This is the guided version: a yellow flash shows where to click and a bar says what to do. Switch to Free play any time.
GuidedPress the highlighted Start button. You can edit the names above first, or keep the samples.
Make it yours
Replace the sample names so the scenario and the debrief you export are about your organisation.
TL;DRWhat this lab is
5 points
- A scenario lab: a fictional shop owner loses her Instagram account, and you make the calls through the first hour.
- You make 11 scored decisions: the email notice, securing the mailbox, scanning the device, recovery routes, the video selfie, warning friends, two-factor authentication, leftovers and reused passwords. Each is scored 0 to 10 with the reason.
- Based on Instagram's own help article for hacked accounts, Instagram's safety post and the FTC's guide to recovering a hacked account. Menu names in the real app change, so the lab teaches the order and the goal.
- Free to play. A final score and grade, a shareable scorecard and next-step links. A downloadable debrief is available with a paid plan.
- Educational only. Everyone and everything in the lab is fictional, every address uses a reserved example domain, and no real link appears.
Frequently asked questions
Is this a real Instagram account?
No. The person, the shop and every address are fictional. The guidance behind the scores comes from Instagram's help article for hacked accounts and the FTC's recovery guide.
Will this recover my own hacked account?
No. It is a rehearsal. If your account is hacked now, use the steps in the blog post and Instagram's own help page, and start with the email address on the account.
What if the menus in the real app look different?
They change from time to time. The lab teaches the order and the goal of each step, and the blog post links the official help page so you can check the current wording.
How is it scored?
Each decision scores 0 to 10 and the final score is the share of the maximum along your path. The feedback says why each answer was better or worse.
Can I download my debrief?
The debrief is shown on the page for free. Downloading it as Word, PDF or Markdown needs a paid plan.
More security tools
The tools people use most on PlayCISO.
Catch injected instructions hiding in content your AI agent should only read.
Score your readiness against the first international standard for AI security threats.
Critical CVEs across 21 major vendors, month by month — and what the 2026 surge means.
Build an ordered ruleset, replay labelled packets and catch shadowed and any-to-any rules.
Self-assess all six Functions, from Govern to Recover, and see your weakest one.
Search 172 threat actors across Microsoft, CrowdStrike, Mandiant and community names.