How to set up two-factor authentication on Instagram

Is this your situation?

The short answer

Before you start

• Pick a security method Two-factor authentication asks you to choose one of three security methods.Verify: Decide between authentication app, text message, or WhatsApp.
• Confirm you have at least one method You need at least one security method set up to use two-factor authentication.Verify: Check which method you can complete right away.
• Check your device if using an authentication app The authentication app method can only be turned on using the Instagram app for Android and iPhone.Verify: Confirm you are on a phone, not a desktop browser.

How Instagram handles this

• The authentication app method is recommended because multiple devices connected to an account can all get login codes.
• The text message method sends a login code to your mobile number.
• To use WhatsApp as a security method, you must first turn on the text message method.
• After turning on two-factor authentication, you can see login requests and remove trusted devices.

Step by step

1. Open Settings Click More in the bottom left, then click Settings.Confirm: Check that the Settings menu has opened.
2. Open Accounts Center Click See more in Accounts Center, then click Password and security.Confirm: Check that Password and security has opened.
3. Select the account Click Two-factor authentication, then select an account.Confirm: Check that your account name appears selected.
4. Choose a security method Choose the security method to add and follow the on-screen instructions.Confirm: Check the screen for the method you selected.
5. Use an authentication app, if chosen An authentication app such as Duo Mobile or Google Authenticator is used to get login codes.Confirm: Check your authentication app for a generated code.
6. Use text message, if chosen The text message method sends a login code to your mobile number.Confirm: Check your phone for the text message code.
7. Add WhatsApp, if wanted After turning on text message, you can turn on WhatsApp to get login codes from WhatsApp.Confirm: Check WhatsApp for the login code.
8. Mark trusted devices as needed If a device has not been marked as trusted, you can mark it as trusted when logging in.Confirm: Check for the Trust this device prompt.If this fails: Do not mark a public or shared device as trusted.

Common mistakes

• Trusting a shared device A user should not tap Trust this device on a public or shared device other people can access.Why it happens: You tap the option at login without thinking about who else uses the device.
• Trying the app method on desktop The authentication app method can only be turned on using the Instagram app for Android and iPhone.Why it happens: You attempt setup from a desktop browser and expect to find the option there.
• Losing access to codes If you lose access to your phone or email and cannot get login codes, you can use a backup code to log in.Why it happens: You replace your phone before saving any backup codes for the account.Already happened: See account recovery if you cannot get a login code at all.

Roles at a glance

Keeping track of who has access