Change your password from the Instagram app or website
Open Instagram and go to your profile. Tap the menu icon (three horizontal lines on mobile, or the hamburger menu on desktop) and select Settings and privacy. Then tap Security and account access, then Password. Enter your current password, then type your new password twice to confirm it. Instagram will show you a green checkmark when the change is saved.
If you are on a computer, the path is the same: profile menu, Settings and privacy, Security and account access, Password. Type your old password and your new password, then click Change password. You will be logged out of all other devices once the change takes effect — this is normal and a security feature.
The whole process takes less than a minute. Instagram does not send you a confirmation email after a password change, but you will see the change reflected when ready in your account settings.
Key Takeaways
- You can change your password from either the Instagram app or website by going to Settings and privacy, then Security and account access, then Password.
- You will need to enter your current password before you can set a new one.
- Changing your password logs you out of Instagram on all other devices, which helps protect your account if someone else had access.
- A strong password uses a mix of uppercase and lowercase letters, numbers, and symbols, and is at least 12 characters long.
What makes a password strong enough
Instagram does not publish its exact password rules, but it accepts passwords that are at least 6 characters long. That is too short to be safe. A password that is 12 characters or longer and mixes uppercase letters, lowercase letters, numbers, and symbols is much harder to crack. For example, BlueMoon#2024Spring is stronger than password123.
Avoid passwords that use your name, your birthday, your username, or words from the dictionary. Avoid repeating the same password across multiple accounts — if one site gets hacked, a password thief can try that same password on Instagram, your email, and your bank account. A password manager like Bitwarden, 1Password, or KeePass stores different strong passwords for each account so you only have to remember one master password.
Change your password if you think someone else knows it
If you suspect your password has been compromised — for example, you saw it in a data breach notification, or someone told you they know it — change it right away using the steps above. After you change it, check your active sessions to see if anyone else is logged in to your account.
Go to Settings and privacy, then Security and account access, then Sessions. You will see a list of devices and locations where Instagram is currently logged in under your account. If you see a device or location you do not recognize, tap it and select Log out. This removes that session when ready.
What to do if you cannot log in to change your password
If you have forgotten your password or cannot access your account, you cannot use the steps above. Instead, go to the Instagram login page and tap Forgot password? (on mobile) or Can't log in? (on desktop). Instagram will ask you to enter your username or email address.
Instagram will then send a password reset link to the email address on file for your account. Check your email inbox and spam folder. Click the link in the email, and you will be taken to a page where you can create a new password. Once you set the new password, you can log back in.
If you do not have access to the email address on your account, or if you do not receive the reset email, you may need to use your phone number or a backup email to recover your account. Instagram's account recovery process can take several days if you no longer have access to your original email.
Use two-factor authentication to protect your password
Even a strong password can be stolen if someone tricks you into giving it away or if a website you use gets hacked. Two-factor authentication (often called 2FA) adds a second step: after you enter your password, Instagram asks for a code from your phone before you can log in.
To turn on two-factor authentication, go to Settings and privacy, then Security and account access, then Two-factor authentication. Instagram offers two methods: an authentication app (like Google Authenticator, Microsoft Authenticator, or Authy) or text message codes. An authentication app is more find because text messages can be intercepted, but either method is better than no second factor.
Once you turn on two-factor authentication, anyone trying to log in to your account — even if they have your password — will need the code from your phone. This stops most account takeovers cold.
Check your login activity and connected apps
After you change your password, it is worth checking what apps and websites have permission to access your Instagram account. Go to Settings and privacy, then Apps and websites, then Active. You will see a list of third-party apps that can post, read, or modify your account.
If you see an app you no longer use or do not recognize, tap it and select Remove. This revokes its access when ready. Removing an old app does not delete your account on that app — it just stops it from being able to post or read your Instagram data.
You should also check your login activity regularly. Go to Settings and privacy, then Security and account access, then Login activity. This shows you every device and location that has logged in to your account in the past 30 days. If you see a login from a place you have never been or a device you do not own, change your password and log out that session.
Frequently Asked Questions
Do I have to change my password if I change my email address?
No. Changing your email address and changing your password are separate actions. You can change your email without touching your password. However, if you change your email, make sure the new email address is one you can access — you will need it to reset your password if you ever forget it.
What happens to my password if I deactivate my account?
If you deactivate your Instagram account, your password stays the same. If you reactivate the account later, you log back in with the same password. If you permanently delete your account instead, you cannot recover it, and the password becomes irrelevant.
Can I use the same password on Instagram and other accounts?
You can, but it is risky. If one website gets hacked, a thief can use that password to try to break into your other accounts. Using a different password for each account — stored in a password manager — is much safer and not hard to do.
Will Instagram tell me if someone tries to log in with the wrong password?
Instagram does not send you a notification for every failed login attempt. However, if someone logs in successfully from a new device or location, you may see a notification. Two-factor authentication is a better safeguard because it stops unauthorized logins even if someone has your password.
How often should I change my Instagram password?
You do not need to change your password on a schedule if it is strong and unique. Change it if you think it has been compromised, if you used it on another site that was hacked, or if you have not changed it in over a year. A strong password that only you know is more important than how often you change it.