How to Enable 2FA on Instagram
Instagram account takeovers are common — attackers target creators, businesses, and verified accounts. Authenticator-app 2FA blocks every password-only attack, even if your password leaks.
Quick path: Profile → Menu → Accounts Center → Password and security → Two-factor authentication
Step-by-step: 2FA setup on Instagram
- 1
Open Accounts Center
In the Instagram app or web, go to your Profile → tap the menu (☰) → 'Accounts Center'. (On the web: Profile → Settings → 'See more in Accounts Center'.)
- 2
Open Password and security
Inside Accounts Center, tap 'Password and security' → 'Two-factor authentication'. Pick the account you want to protect.
- 3
Choose Authentication app
Tap 'Authentication app' (skip SMS — it's less secure). Instagram shows a QR code with a manual setup key.
- 4
Add to 2FAA
Open 2FAA and scan the QR code (or paste the manual key). 2FAA generates the 6-digit Instagram codes.
- 5
Confirm with the current code
Type the active 2FAA code back into Instagram and tap 'Next'. 2FA is now active.
- 6
Save backup codes
Instagram shows 5 single-use backup codes — screenshot them and store somewhere offline. Without them, losing your authenticator locks you out.
Generate Instagram 2FA codes with 2FAA
You don't need a separate authenticator app. 2FAA is a free, browser-based TOTP generator — your secret never leaves your device, and it works offline as a PWA. The same secret can be used in parallel with Google Authenticator or Authy if you prefer redundancy.
Frequently asked questions
Instagram 2FA SMS vs authenticator app — which is better?
Authenticator app, every time. SMS can be intercepted via SIM-swap; authenticator codes are generated locally on your device and never sent over a network.
Can I have 2FA on multiple Instagram accounts with 2FAA?
Yes. Add each Instagram account's secret as a separate entry in 2FAA — they all generate codes side by side.
Instagram says 'invalid security code' — what now?
Check your device's clock. TOTP relies on accurate time. Enable 'Set automatically' for time/date on your phone and computer, then try the current 2FAA code.
How do I remove 2FA from Instagram?
Accounts Center → Password and security → Two-factor authentication → tap 'Authentication app' and turn it off. You'll need a current 2FA code to confirm.