How to Tell If Your Instagram Has Been Compromised

    Warning signs and security checks if you suspect unauthorised access to your Instagram account.

    JDCS
    By Jordan Dickson · Reviewed by CSG Security Engineers

    Updated June 2026 · 1 min read

    Warning signs, security checks, and immediate steps if you suspect unauthorised access.

    Warning Signs Your Instagram Is Compromised

    • Login alert from an unfamiliar device or location
    • Password no longer works
    • Email, phone, or username changed without your knowledge
    • Friends receiving spam DMs from your account
    • Posts, stories, or reels you didn't create
    • Unfamiliar accounts followed from your profile
    • Bio, profile photo, or name changed
    • Two-factor authentication disabled

    How to Check for Unauthorised Access

    1. Review Login Activity

    Go to Settings → Security → Login Activity. Log out of any unfamiliar sessions.

    2. Check Emails from Instagram

    Go to Settings → Security → Emails from Instagram to see legitimate emails from the last 14 days.

    3. Review Connected Apps

    Go to Settings → Security → Apps and Websites. Remove unrecognised apps.

    4. Check Your Activity

    Review Your Activity for posts, likes, comments, and follows you didn't make.

    Immediate Actions

    1. Change your password immediately
    2. Enable two-factor authentication
    3. Log out of all sessions
    4. Remove unfamiliar apps
    5. Restore your email and phone number
    6. Alert followers

    Important

    Can't log in? Use Get help logging in on the login screen. See: How to Recover Your Instagram Account After Being Hacked.

    Was this guide helpful?

    Know someone who needs this? Send them the guide.

    JD

    Written by

    Jordan Dickson

    Founder, CyberSecurityGuides

    Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.

    Reviewed by CSG Security Engineers

    More from Social Media Security