Securing Instagram step by step

Seven steps, in order.


"I have an Instagram account and I am afraid of losing it."

Step 1 β€” Check the email address

In Instagram, check that the email address on the account belongs to you, still works, is protected by a unique password, and has its own 2FA.

Step 2 β€” Change the password if it is reused

If your Instagram password is also used elsewhere, change it. Let the iPhone generate a new strong password, and do not reuse the old one anywhere.

Step 3 β€” Turn on 2FA

Depending on the app version, Meta centralises these settings in the Accounts Center. Path given in Meta's documentation:

Instagram
β†’ Profile
β†’ Menu
β†’ Accounts Center
β†’ Password and security
β†’ Two-factor authentication
β†’ choose the Instagram account

Then choose the method offered. If an authenticator app is available, you can use it.

Step 4 β€” Save the backup codes

Instagram lets you generate backup codes. They are used if you lose access to your phone or your 2FA method.

Accounts Center
β†’ Password and security
β†’ Two-factor authentication
β†’ your account
β†’ Additional methods
β†’ Backup codes

Keep a printed copy at home, in a secure place separate from your phone. Avoid leaving the only copy somewhere you could no longer reach if your phone or account were lost.

Step 5 β€” Check connected devices

Meta lets you review devices that have recently signed in. Look for "Where you're logged in" or "Login activity".

Normal:
iPhone β€” France
Mac β€” France

Investigate immediately:
Android β€” unknown country
Windows β€” unknown device

If you see an unknown session:

  1. sign it out
  2. change your password
  3. check 2FA
  4. check the email address and phone number on the account

Step 6 β€” Check connected apps

An old service may still have access to your account: an analytics tool, a follower app, an automation service, an old publishing app. Remove any access you do not recognise or no longer use.

Step 7 β€” Never give out an Instagram code

Nobody needs you to pass on your login code. A scammer may invoke account verification, a partnership, a contest, a verified badge, account recovery, Instagram support, or a friend who "needs help".

Instagram checklist

0 / 7 checked

Every recommendation links back to official documentation.