Get Back Into a Locked Instagram Account (2026)

If you are locked out, start on the login screen and request a login link to the email or phone still on the account. Instagram's hacked-account article is the page that spells that out. If you can still get in, skip the login screen and change the password from Accounts Center before you do anything else.

The right path depends on one fact: can you open the account right now, or not.

You cannot log in

On the login screen:

1. Tap Forgot password?
2. Enter the username, email address, or phone number on the account, then tap Continue.
3. Complete the captcha.
4. Choose the email address or the phone number, then tap Continue.
5. Open the login link in the email or the text message and follow the instructions on the screen.

If you do not have the username, email, or phone that is on the account anymore, enter the login you used most recently. Then tap Can't reset your password? under Continue, and follow the instructions there.

A login link that never arrives has a second door on the same screen. Tap Can't Reset Your Password? under Send login link. Choose the email or the phone, then tap Send security code. If the code does not arrive, tap I can't access this email or phone number under Send security code, and follow what the screen asks for next.

That last branch is the support request. Instagram uses it when the contact on the account is gone. The article does not promise the account comes back. It tells you to follow the on-screen instructions.

The captcha sits between your username and the login link. Finish it before you leave the screen. The login link and the security code both come from Instagram after that step, by email or by text, and you open them to get back to the account.

An email said the address was changed

If a message from [email protected] says your email address was changed, the hacked-account article says you may be able to undo that from the message itself. Use the secure my account action in that email.

If the password was changed as well, and you cannot put the old email back, request a login link or a security code with the steps above. The old email is no longer enough on its own once the password moved with it.

You can still get in

Change the password before you log out. Instagram's change-password article is for this case: you are logged in and you know the current password.

1. Tap your profile picture in the bottom right.
2. Tap Menu in the top right.
3. Tap Accounts Center, then Password and security.
4. Tap Change password, then tap the account.
5. Enter the current password, enter the new one, retype it, and tap Change password.

A strong password, in Instagram's words, uses a combination of at least 6 numbers, letters, and punctuation marks.

While you are still inside, the hacked-account article also tells you to:

• Turn on two-factor authentication.
• Confirm the phone number and email on the account are still yours.
• Open Accounts Center and remove linked accounts you do not recognize.
• Revoke access for third-party apps you do not recognize.

Do those before you close the app. A lockout is harder to unwind than a password change you make while the session is open.

Turn on two-factor authentication

Two-factor authentication asks for a code when a login comes from a device Instagram does not recognize. The setup path:

1. Tap your profile picture.
2. Tap Menu.
3. Tap Accounts Center, then Password and security.
4. Tap Two-factor authentication, then choose the account.
5. Pick a method and follow the screen.

Instagram offers three methods:

• An authentication app, which it recommends. Duo Mobile and Google Authenticator are the examples it names. This method can only be turned on in the Instagram app for Android and iPhone. You can attach more than one device so each of them can produce codes.
• A text message to your mobile number.
• WhatsApp. Turn on the text-message method first. Then you can turn on WhatsApp so the codes arrive there.

After it is on, you can see login requests and remove trusted devices. If you lose the phone or the email and you cannot get a code, Instagram says you can use a backup code to log in. Save those codes somewhere that is not the phone you just secured.

A device you mark as trusted will not ask for a code again. Trusted means you signed in with two-factor on that device and tapped Trust this device. Do not tap that on a shared computer.

Take the old session off the phone

The phone can store several Instagram logins and still keep you inside only one. A changed password does not wipe those saved logins. If the account was open on a shared phone, remove the shortcut after you are back in.

From the login screen:

1. Tap Options in the top right.
2. Tap Remove profiles from this device.
3. Tap Remove next to the account.

Instagram says this only removes the login from that iPhone or Android device. It does not deactivate the account, and it does not permanently delete it. Not everyone sees Remove while Meta moves people to Meta Accounts. If the button is missing, Menu, then Login, then Log out drops the session you are in.

A professional account that is still posting

The hacked-account article calls out a separate case: you can log in, the account is professional, and someone else is still taking actions on it. Instagram points that case to its own follow-up article. Change the password, turn on two-factor authentication, pull unknown Accounts Center links, and revoke third-party apps before you chase individual posts. Those four are the actions the hacked-account page lists for anyone who can still get in.

Then look at what changed while you were out. Bio, profile photo, linked email, and recent posts are the usual places. Followers who left during that window are a different report: how to see who unfollowed you.

Publish again only after the login is yours

Reach will look dead for a day or two if the account was posting junk or sitting silent. That is a distribution problem, covered in why Instagram reach stalls, and it is separate from getting the password back.

If the recovered profile is the one that runs ads, confirm the email on the professional account before you upload anything new. Reel length rules did not change because you were locked out: how long Instagram Reels can be. Whether that profile can earn from views is a separate eligibility check: does Instagram pay for views.

A brand that needs new talking-head clips after the account is clean can make them in EzUGC, from a script, with AI actors. Plans start at $99 a month for up to 50 videos on the pricing page. Get the Instagram login back first. The ad file does not recover the account.

Who watched a Reel is still not a list Instagram hands you. That limit is in who can see your Reels viewers.