How to set up two-factor authentication on Instagram
Add a second layer of security to your Instagram. Turn on two-factor with an authenticator app, SMS, or WhatsApp — and save your backup codes for safekeeping.
Two-factor authentication is the single most effective thing you can do to keep your Instagram from being taken over. Once it is on, logging in needs your password plus a code from a second source. Instagram supports an authenticator app, SMS text, or WhatsApp — an authenticator app is the most reliable. Whichever you pick, save your backup codes so a lost phone never locks you out.
If your situation is actually …
- You are switching phones or methods → Change or turn off two-factor →
- You want to save and store backup codes properly → Set up and save backup codes →
- Two-factor is already blocking your login → Two-factor isn't working →
Before you start
Access to your Instagram account right now
Set up two-factor while you can still log in normally.
An authenticator app, or a phone for SMS/WhatsApp
An authenticator app (e.g. a TOTP app) is the most resilient option.
Turn on two-factor authentication
Open security settings
Go to your account security settings from the Instagram app or Accounts Center.
Where: Instagram app → Settings → Accounts Center → Password and security
Choose two-factor authentication
Select the account, then open two-factor authentication.
Where: Password and security → Two-factor authentication
Pick a method
Choose an authenticator app (recommended), SMS, or WhatsApp, and follow the setup for that method.
Save your backup codes
Instagram shows a set of one-time backup codes. Store them somewhere safe and offline before you finish.
Confirm: Two-factor shows as on, with your chosen method listed.
If this fails: Save backup codes properly
Two-factor setup mistakes
Relying on SMS alone
SMS can be intercepted or lost with the number. An authenticator app is sturdier; keep SMS as a backup at most.
Not saving backup codes
If you lose the phone with your authenticator, backup codes are often the only way back in.
Already happened: Set up and save backup codes
Frequently asked questions
Delvia
Access issues are easier to prevent when roles, owners, and responsibilities are recorded clearly
Most access problems trace back to the same gap — no clear record of who has access, what role they hold, and what should happen when that changes. Delvia helps you keep that record so problems are visible before they become incidents.