Instagram has transformed from being simply a photo-sharing platform to becoming essentially an individual’s diary, networking site, and even career portfolio. However, with increased instances of cybercrime, phishing scams, and social engineering, protecting your personal Instagram account has never been more important.
I’ve been involved in social media consulting and internet security for almost a decade, and, boy, have I seen what can happen when you don’t protect your personal information, if your passwords are weak, and if you trust others all too easily? This guide will share with you what you can do to secure your Instagram, stay protected from hackers, and make sure you control what you share and with whom.
Finally, I will share my own personal experiences – instances where I had to act to restore accounts belonging to clients who felt they were secured against hacking. And by then, you will know precisely what you need to do to protect your Instagram and what you can do if your Instagram has been hacked.
Firstly, Ensure Your Account Is Set to Be Private
This may seem self-evident, but time and time again, I’ve seen clients think they’re posting behind closed doors when, in truth, they’ve left parts of their profiles open to the world.” Writing for NBC, Peterson explained, “A client of mine last year, a small business owner, had set up the ‘Private Account‘ switch, thinking she was secure, but she’d left parts of her page viewable by anyone and everyone.
A Step-by-Step Guide to Privatizing Your Profile
Set Your Profile to Private:
- Go to your profile > Tap three lines (menu) > Settings and Privacy.
- Under “Who can see your content” you can select “Private Account”.
- This will ensure that only approved followers can view your posts and stories.
Double-Check Tagged Posts & Mentions:
- From Settings, you can find Tags and Mentions.
- Change “Allow Tags From” to People You Follow or No One.
- This avoids strangers from tagging you in order to lure their followers to your page.
Control Story Sharing:
- Under “Story,” in Settings, turn off “Allow Sharing” so that your followers will not be able to share your stories with people outside your circle.
Analyze Your Bio & Highlights Section. Though you can set up your personal account, your “bio,” “profile picture,” and “highlights” may be public. This is not where you want to post personal details.
Pro Tip: It’s always a good idea to do a “public view” check, so log out of Instagram and check your page in your browser. Anything you can see, you can bet everyone else can see.
The #1 Threat: Social Engineering and Phishing
The truth is, it’s not really hacking and brute-forcing passwords these days either. It’s social engineering, tricking people into giving you what you need, and that’s what’s predominantly happening.
The last and quite disturbing case was when my friend last year sent me a desperate text that she had been locked out of her account. She was sent an email that looked like an official “Instagram Verification Request.” She was so fooled and clicked on it to log into what she thought was an authentic login page. The thief, however, quickly changed her login and email addresses.
How to Spot a Fake Login Page
- Check the URL: The actual Instagram login page will either be instagram.com or the official app, not some fake page with extra words, typos, or strange suffixes.
- Check for HTTPS: All authentic websites display https:// with a lock symbol. The absence of one is reason enough to raise suspicions.
- Test by closing the page: “If you can’t easily get back to your page through official links in the app, it’s probably a fake one.”
Never Share Your Login Code
Instagram has one-time passwords for RESET and login purposes. If anyone asks you for this code, even if it’s allegedly “Instagram Support” or your friend who is locked out of their account, they are attempting to hijack your account.
Throughout my consultancy practice, I’ve seen clients handing over their code to “collaborators” and then losing control of their accounts in minutes.
Hardening Your Account’s Security
To be quite honest with you, if you don’t have strong security, then what’s the purpose of you having your own personal account?
Enable Two-Factor Authentication (2FA) – Non-N
The extra step after entering your password with two-factor authentication is generally entering a code sent to your device or through an app.
- Open Settings and Privacy and then Account Center, and then Password and Security, and then Two-Factor Authentication.
- Prefer Authentication App over SMS if feasible. Services such as Authy or Google Authenticator are generally safer against hacking, as text messages can be intercepted.
But why? The reason is, even if a hacker knows your password, they won’t be able to log in without your 2FA code.
Use a Strong, Unique Password
A poor password is virtually an open invitation to get hacked. To illustrate, one of my clients set her password as Emma1994. Within seconds, it was cracked by a brute-force bot.
Creating strong passwords by:
- Minimum 12 characters.
- Use mixed case, numbers, and punctuation.
- No dictionary words, no personal information.
You should utilize either Bitwarden or 1Password to manage your passwords.
Check Logged-In Devices and Apps
Instagram lets you view all devices that are connected to your Instagram account:
- Now, go to Settings and Privacy > Login activity.
- Remove anything new.
Another potential threat may come from third-party apps. During my security check, I identify dozens of outdated apps that require irrelevant permissions. Remove permissions from anything you are not actively using.
Controlling Your Audience: Who Views Your Posts
Privacy goes beyond hackers and also includes controlling viewers of your posts.
How to Vet Follower Requests
Since your accounts are private, you must approve followers wanting to follow you. Don’t accept requests blindly.
- Check mutual followers.
- Check their profile for suspicious actions such as having no postings, generic pictures, and/or questionable bios.
We decline requests from suspicious and/or inactive accounts.
The “Close Friends” Feature in Stories
“Close Friends” enables you to pick a small group of individuals you’d like to share certain stories with. This feature helps me post personal events, such as family gatherings, that would not be viewed by all my followers.
Limiting Accounts Without Blocking
“If you’re dealing with harassing messages but don’t feel like you can handle the drama of blocking, there’s another Go to their page, tap dots, and then tap ‘Restrict’. They can comment, but their comments are not shown to anyone else unless you approve them.”
What to Do if You Believe You Have Been Hacked
Quick action is crucial:
- Change Your Password Immediately.
- Log Out of All Devices.
- Enable 2FA if not already enabled.
- Use Instagram’s “My Account Was Hacked” Form.
First, if your email address was changed, check if there are any recovery emails from Instagram’s security emails.
FAQ: Your Instagram Security Questions Answered
Q: Can anyone view my personal Instagram if they are following me? A: Yes – approved followers can view all your posts unless you’ve designated them as Close Friends in your story posts or choose not to share posts with them.
Q: Can you provide more information about individualism? A: Make your account private, review your bio/highlight reels, limit unwelcome followers, and adjust tag rights.
Q: How can I know if my Instagram has been hacked? A: Signs include unexpected logouts, notifications about changes to your passwords that you didn’t request, strange posts, or messages sent from your accounts without your permission.
Closing Remarks
Securing your personal Instagram account in the year 2024 can be achieved through effective Instagram account privacy settings, enhanced Instagram login security, and cautious management of your audience. The worst part is, from my experience, most Instagram-related hacking incidents are not caused by any failure of Instagram’s systems, but by you yourself inadvertently compromising your own Instagram login!
The truth is, there is no such thing as a “miracle shield,” but if you stick with all of these tips, you will be safer than if you didn’t. Your Instagram should be a place where you can share your life, interests, and work without worrying about hackers and prying eyes. Take 15 minutes today to review your Instagram, tighten your passwords, and set up 2FA. Your future self will be thankful.