- Switch to a private account and review followers, tags, mentions and message settings first.
- Two-factor authentication with an authenticator app protects your account better than SMS codes alone.
- Close Friends, activity status and location settings decide how much of your life others see.

Instagram holds your photos, DMs, location tags and contacts, all on your mobile. These Instagram privacy tips will help you decide who can follow you, message you and see your activity, and how to keep your account safe from hackers and scammers.
Instagram changes its menus often, and some options differ by country and account type. The steps below follow the current mobile app: tap your profile picture, open the menu at the top right and choose Settings and activity. If you cannot find an option, update the app first.
Instagram Privacy Tips: Switch to a Private Account
A public account lets anyone see your posts, Reels and followers. A private account means only approved followers can view your content. Go to Settings and activity > Account privacy and turn on Private account.
Also Read
After switching, open your followers list and remove people you do not know. Note that professional (creator or business) accounts may need to be changed to a personal account before this option appears. Content you posted earlier is hidden from non-followers once the account is private.
Control Who Can Message, Tag and Mention You
Most unwanted contact on Instagram comes through DMs, tags and mentions. Review each of these in Settings and activity. Option names can vary slightly, but this is a sensible starting point.
| Setting | Suggested choice | Why it helps |
|---|---|---|
| Messages from others | People you follow, or followers only | Reduces spam and scam DMs |
| Show activity status | Off | Hides when you were last active |
| Tags | People you follow | Stops strangers from tagging you in posts |
| Mentions | People you follow | Limits unwanted mentions in Stories and comments |
| Hidden Words | On | Filters abusive comments and message requests |
If someone keeps bothering you, use Restrict instead of Block when you do not want to start a fight. Restricted accounts cannot see your activity status, and their comments stay hidden unless you approve them.
Use Close Friends and Hide Your Story
You do not have to share every Story with every follower. These two controls give you more say:
- Close Friends: create a list in Settings and activity and share personal Stories only with them. You can also use it for live videos, as we explained in our report on Instagram Live for Close Friends.
- Hide story from: pick specific people who should not see your Stories, such as old contacts or colleagues.
- Story sharing: turn off options that let others reshare your Story or send it as a message if you want tighter control.
If you cross-post between Meta apps, check what is shared where. Our guide on posting WhatsApp Status on Instagram and Facebook explains how that sharing works.
Turn On Two-Factor Authentication
A strong password is not enough if someone steals your login code. Two-factor authentication asks for a second check each time a new device signs in. Open Settings and activity, go to Accounts Center, then Password and security, and choose Two-factor authentication.
- Select your Instagram account and choose an authentication app if you can. SMS codes also work, but they depend on your SIM.
- Save the backup codes in a safe place, not in your phone gallery.
- Check where your account is logged in and sign out of devices you do not recognise.
- Change your password if you see any unfamiliar login, and never reuse it on other apps.
Never share a login code with anyone, including people who claim to be from Instagram support.
Manage Location, Contacts and Ad Data
Instagram can learn a lot about your daily routine from location tags, synced contacts and ad activity. A few quick checks reduce that footprint:
- Avoid adding your exact location to posts and Stories, especially from home, school or office.
- Review location sharing in the app and in your phone settings, and allow it only while using the app.
- Check whether contact syncing is on in Accounts Center and switch it off if you do not need it.
- Visit Ad preferences in Accounts Center to review how your activity is used for ads.
Block Scam Accounts and Fake Verification Messages
Scammers often send DMs about copyright violations, fake blue-tick offers or prize money, each with a link. Do not open these links. Instagram will not ask for your password through a DM. Report the account, block it and, if you already clicked, change your password and check your login activity.
Parents of younger users should also look at Teen Accounts, which apply stricter default settings. Our article on Instagram Teen Accounts in India covers the parental controls.
Instagram Privacy Checklist: 10 Settings to Review
- Make the account private.
- Remove unknown followers.
- Limit who can message you.
- Switch off activity status.
- Restrict tags and mentions.
- Turn on Hidden Words.
- Use Close Friends for personal Stories.
- Enable two-factor authentication.
- Check login activity and log out unknown devices.
- Review location, contact sync and ad settings.
Conclusion
Most Instagram privacy problems come from default settings that nobody changed. Make the account private, tighten who can reach you, protect the login with two-factor authentication and be careful with location and contact data. Check these settings again after big app updates.
FAQ
Is a private Instagram account really private?
Only approved followers can see your posts, Reels and Stories. Your profile photo, name and bio remain visible, and followers can still take screenshots.
Can I turn off the activity status on Instagram?
Yes. In the messages settings you can switch off Show activity status. Remember that you may then not see other people’s activity status either.
What should I do if my Instagram account is hacked?
Try to reset your password, check login activity, sign out of unknown devices and turn on two-factor authentication. Use Instagram’s help options if you are locked out.
Does Instagram ask for my password in a DM?
No. Messages asking for your password, login code or payment to keep your account are scams. Do not click the link, and report and block the sender.












