Instagram has over 2 billion monthly active users and is one of the most popular platforms for sharing photos, videos, and stories. It is also a common target for scams, impersonation, and phishing attacks. This guide covers everything from securing your account to permanently deleting it.
Set a Strong Password
Your Instagram password should be unique and not shared with any other account, especially your email or Facebook.
- Open Instagram and go to Settings > Accounts Center > Password and Security > Change Password
- Choose a password at least 12 characters long
- Include uppercase letters, lowercase letters, numbers, and special characters
- Do not use your name, birthday, or common words
Use our Password Generator to create a strong, random password.
Enable Two-Factor Authentication
This is the most important security step. With 2FA enabled, anyone trying to log into your account needs both your password and a verification code.
- Go to Settings > Accounts Center > Password and Security > Two-Factor Authentication
- Select your Instagram account
- Choose your method:
- Authentication app (recommended) — Google Authenticator, Authy, or similar
- Text message (SMS) — your phone receives a code via text
- WhatsApp — receive codes via WhatsApp
- Follow the setup instructions
- Save the backup codes Instagram provides in a secure location
Review Login Activity
Check where your account is currently logged in and remove any sessions you do not recognize.
- Go to Settings > Accounts Center > Password and Security > Where You're Logged In
- Review every device and location
- Tap any session you do not recognize and select Log Out
- If you see suspicious activity, change your password immediately
Lock Down Your Privacy Settings
Switch to a Private Account
- Go to Settings > Account Privacy
- Turn on Private Account
- Only approved followers will see your posts, stories, and Reels
Control Your Story Sharing
- Go to Settings > Privacy > Story
- Turn off Allow Sharing if you do not want people forwarding your stories
- Use Close Friends to share sensitive stories with a smaller audience
- Turn off Allow Sharing to Facebook if you do not want stories cross-posted
Hide Your Activity Status
- Go to Settings > Privacy > Activity Status
- Turn off Show Activity Status so others cannot see when you were last online
Manage Sensitive Content
- Go to Settings > Content Preferences > Sensitive Content Control
- Choose Less to reduce exposure to sensitive content in Explore and Reels
Control Who Can Interact With You
Comments
- Go to Settings > Privacy > Comments
- Turn on Manual Filter and add words you want blocked from your comments
- Choose who can comment: Everyone, People You Follow, or Followers
Messages
- Go to Settings > Privacy > Messages
- Under "Other people on Instagram," choose Don't Receive Requests to block messages from strangers
- Turn off Allow Message Requests in group chats from strangers
Tags and Mentions
- Go to Settings > Privacy > Tags
- Set "Allow Tags From" to People You Follow or No One
- Turn on Manually Approve Tags before they appear on your profile
- Go to Privacy > Mentions and set to People You Follow or No One
Remove Connected Apps
- Go to Settings > Security > Apps and Websites
- Review all apps under Active
- Remove any app you do not use or recognize by tapping Remove
- Check Expired and Removed tabs to review past access
Download Your Instagram Data
Before disabling or deleting your account, download everything.
- Go to Settings > Accounts Center > Your Information and Permissions > Download Your Information
- Select your Instagram account
- Choose Complete Copy or select specific data types
- Pick format: HTML (easy to browse) or JSON (machine-readable)
- Click Request a Download
- Instagram will email you a link when the file is ready (this may take up to 48 hours)
- Download and save the file to a safe location
How to Temporarily Disable Your Account
Disabling hides your profile, photos, comments, and likes until you log back in. Your data is preserved.
- Log in to Instagram on a web browser (instagram.com) — this cannot be done from the app
- Go to your profile and click Edit Profile
- Scroll down and click Temporarily disable my account
- Select a reason from the dropdown menu
- Re-enter your password and click Temporarily Disable Account
To reactivate, simply log back in through the app or website.
How to Permanently Delete Your Instagram Account
Deletion removes your profile, photos, videos, comments, likes, and followers permanently.
Before you delete:
- Download your data (see above)
- Remove Instagram Login from any apps that use it
- Save any photos or videos you want to keep
- Transfer ownership of any business pages
To delete:
- Visit Instagram's account deletion page: instagram.com/accounts/remove/request/permanent/
- Log in if prompted
- Select a reason for leaving
- Re-enter your password
- Click Delete [username]
Instagram provides a 30-day grace period. If you log in during those 30 days, the deletion is cancelled. After 30 days, your account and data are permanently removed, though full deletion from servers can take up to 90 days.
To check if your personal data is still circulating online after leaving Instagram, use our GCR Data Shield to scan 500+ data broker sites. Use our AI Scam Checker to verify any suspicious messages you receive.