Card 09Securing Instagram step by step

"I have an Instagram account and I am afraid of losing it."

Step 1 - Check the email address

In Instagram, check that the email address on the account belongs to you, still works, is protected by a unique password, and has its own 2FA.

Step 2 - Change the password if it is reused

If your Instagram password is also used elsewhere, change it. Let the iPhone generate a new strong password, and do not reuse the old one anywhere.

Step 3 - Turn on 2FA

Depending on the app version, Meta centralises these settings in the Accounts Center. Path given in Meta's documentation:

Then choose the method offered. If an authenticator app is available, you can use it.

Step 4 - Save the backup codes

Instagram lets you generate backup codes. They are used if you lose access to your phone or your 2FA method.

Keep a printed copy at home, in a secure place separate from your phone. Avoid leaving the only copy somewhere you could no longer reach if your phone or account were lost.

Step 5 - Check connected devices

Meta lets you review devices that have recently signed in. Look for "Where you're logged in" or "Login activity".

Normal:
iPhone - France
Mac - France

Investigate immediately:
Android - unknown country
Windows - unknown device

If you see an unknown session:

1. 1sign it out
2. 2change your password
3. 3check 2FA
4. 4check the email address and phone number on the account

Step 6 - Check connected apps

An old service may still have access to your account: an analytics tool, a follower app, an automation service, an old publishing app. Remove any access you do not recognise or no longer use.

Step 7 - Never give out an Instagram code

Nobody needs you to pass on your login code. A scammer may invoke account verification, a partnership, a contest, a verified badge, account recovery, Instagram support, or a friend who "needs help".

Instagram checklist