Trusted Reviews is supported by its audience. If you purchase through links on our site, we may earn a commission. Learn more.

How to use Instagram Security Checkup

Instagram has launched a new security feature to help people keep their accounts secure and safe from hackers.

Instagram revealed a new Security Checkup feature to help users keep their accounts secure and safe in July. Here’s how it works and why you should use it.

Now, when a user logs into their account, they will see a pop-up if Instagram thinks their account has been compromised, giving people the chance to undergo a security checkup and check the activity on their account.

Users now can also enable two-factor authentication on their Instagram, either through Whatsapp, if you are using it, or through your phone number, or authenticator apps such as Duo Mobile or Google Authentication.

For anyone wondering how to use this new Security Checkup feature and how to set it up on your own account, keep reading to find out.

There are a few ways you can turn on two-factor authentication. In the coming weeks, if you use Whatsapp, you will be able to protect your account using your Whatsapp number in certain countries.

Currently, you can use your mobile number or authentication apps to set up two-factor authentication.

  1.  You will need to open the Instagram app and tap the profile picture on the bottom right to go to your profile.
  2. Tap on the three lines at the top right side of the screen.
  3. Click Settings.
  4. In Settings, click on Security.
  5. Then tap on Two-Factor Authentication.
  6. Once there, click the Get Started button at the bottom to begin setting up your two-factor authentication.
  7. At this stage, you will be offered two ways to enable your authentication, click on the Text message option.
  8. For the Text option, Instagram will ask you for a phone number if your account is not linked to one. After entering your phone number, click Next.
  9. Tap Done and your account should have set up two-factor authentication with your phone number.
  10. You should then get the below confirmation.
This is what will show up on your screen when you have enabled the text message two-factor authentication.

If you don’t want to use your mobile number to set up your two-factor authentication, you can also use a third-party app to keep your account secure.

You can also have both of these options turned on if you want to keep your account extra secure.

  1. You will need to open the Instagram app and tap the profile picture on the bottom right to go to your profile.
  2. Tap on the three lines at the top right side of the screen.
  3. Click Settings.
  4. In Settings, click on Security.
  5. Then tap on Two-Factor Authentication.
  6. Once there, click the Get Started button at the bottom to begin setting up your two-factor authentication.
  7. At this stage, you will be offered two ways to enable your authentication, click on the Authentication app option.
  8. If you do not have the app already, you will be prompted to download an authentication app, Instagram recommends Duo Mobile or Google Authenticator.
  9. Click Get Started and follow the on-screen instructions.
  10. You will have to enter a confirmation code from the third-party authentication app to complete the process.
This is what will show up on your screen when you have set up the two-factor authentication with a third-party app.

After completing the authentication process, the app will present the user with five Backup Codes that can be used to get back into your account if you lose your phone or can’t receive a code via text message or through the authentication apps. You should save these codes and keep them in a secure place so you can access your account.

Each of the codes can only be used once but you can request new codes if you are worried any of them have been stolen or you are running out.

Instagram has also advised other ways to keep your account safe, including making sure that your email and phone numbers linked to your account are up to date and are accessible, in case Instagram needs to contact you.

Instagram has also said that it will never send you a DM and that you should never send anyone your personal information via DM in the app.

If Instagram wants to contact you it will only do via the Emails from Instagram tab in your Settings.

You can also now enable login requests, as when you set up two-factor authentication on the app you will receive an alert whenever someone tries to log into your account from a device that Instagram doesn’t recognise.

You can approve or deny these requests immediately from your already logged-in devices, as Instagram will tell you when the person attempted to log in, on what device and in what location.

As ever we also recommend privacy conscious users read the app’s terms and conditions and consider installing a mobile anti-virus or VPN. You can see a selection of the best VPNs we’ve tested in the prior link.

Why trust our journalism?

Founded in 2004, Trusted Reviews exists to give our readers thorough, unbiased and independent advice on what to buy.

Today, we have 9 million users a month around the world, and assess more than 1,000 products a year.

author icon

Editorial independence

Editorial independence means being able to give an unbiased verdict about a product or company, with the avoidance of conflicts of interest. To ensure this is possible, every member of the editorial staff follows a clear code of conduct.

author icon

Professional conduct

We also expect our journalists to follow clear ethical standards in their work. Our staff members must strive for honesty and accuracy in everything they do. We follow the IPSO Editors’ code of practice to underpin these standards.