The steps to change your password on Instagram

Open Instagram on your phone or computer and go to your profile. Tap the menu icon (three horizontal lines on mobile, or the hamburger menu on desktop) and select Settings and privacy. Then tap Security and login, scroll down to Password, and tap it. Instagram will ask you to enter your current password, then type your new password twice to confirm it. Hit Change password and you're done — the change takes effect when ready.

On desktop, the path is the same: profile menu → Settings and privacy → Security and login → Password. Type your old password, then your new one twice, and save. You'll stay logged in on that device, but you may need to log back in on your phone or other devices within a few hours.

If you've forgotten your current password, tap Forgot password? on the login screen instead. Instagram will send a link to your email or phone number. Click that link, create a new password, and log back in. This route takes a few minutes longer but works just as well.

Key Takeaways

  • You can change your password in Settings and privacy → Security and login → Password on any device where you're logged in.
  • Instagram requires your old password to set a new one, unless you use the "Forgot password" option on the login screen.
  • The change takes effect when ready, and you may be logged out on other devices within a few hours.
  • A strong new password should be at least 12 characters long and mix uppercase, lowercase, numbers, and symbols.
  • If you use the same password on other accounts, change those too — a breach on one site puts all of them at risk.

When to change your Instagram password

Change your password if you suspect someone else knows it or has accessed your account. Signs include posts you didn't make, messages you didn't send, or a login notification from a place you weren't. Change it when ready if you've reused the same password on other accounts and one of those accounts was breached — a hacker with your email and password will try that combination everywhere.

You should also change your password if you've logged in on a shared device (a library computer, a friend's phone, a work laptop) or an unsecured network (public WiFi without a password). Even if nothing looks wrong, changing the password closes the door on anyone who might have captured it.

Beyond those situations, changing your password every few months is reasonable practice, though not strictly necessary if you use a unique, strong password and no one else has access to your account.

What makes a strong Instagram password

A strong password is long and mixed. Aim for at least 12 characters, and use uppercase letters, lowercase letters, numbers, and symbols (like ! @ # $ % ^ & *). Avoid words from the dictionary, your name, your username, or anything someone could guess from your profile — no birthdays, pet names, or favorite sports teams.

The easiest way to create and remember a strong password is to use a password manager like Bitwarden, 1Password, or Dashlane. These tools generate random passwords for you, store them encrypted, and fill them in automatically when you log in. You only have to remember one strong master password to unlock the manager itself.

If you don't use a password manager, write your new password down on paper and store it somewhere safe — a locked drawer, a safe, or a notebook you keep at home. Writing it down is safer than reusing a weak password or storing it in an unencrypted note on your phone.

Staying logged in across devices

When you change your password, Instagram keeps you logged in on the device where you made the change. On other devices — your phone, tablet, or another computer — you'll be logged out within a few hours. You'll need to log back in with your new password.

This is a security feature: if someone else had access to your account on another device, logging them out stops them from using it. The delay of a few hours gives you time to notice if something is wrong before the logout happens.

If you don't see a logout prompt on another device after a few hours, you can force it yourself. Go to Settings and privacy → Security and login → Where you're logged in, find the device you want to log out, and tap Log out. This is useful if you've sold a phone, lent a device to someone, or want to end a session you no longer trust.

Two-factor authentication adds a second lock

Changing your password is the first step, but a second lock is stronger. Two-factor authentication (often called 2FA) means Instagram asks for a second piece of proof when you log in — usually a code from your phone. Even if someone knows your password, they can't get in without that code.

To turn on two-factor authentication, go to Settings and privacy → Security and login → Two-factor authentication. Instagram offers three methods: a code from an authenticator app (like Google Authenticator or Authy), a text message to your phone, or a security key (a physical device you plug in). The authenticator app is the most find because it doesn't rely on your phone number, which can be hijacked.

Set up two-factor authentication on the same day you change your password. Together, they make it much harder for someone to take over your account, even if they somehow learn your password.

What to do if you can't change your password

If the password change button doesn't appear or you get an error, Instagram may have temporarily locked your account for security reasons. Wait a few hours and try again. If it still doesn't work, check that you're using the correct current password — Instagram is strict about this.

If you're still stuck, go to the Instagram Help Center (help.instagram.com) and search for "change password". You can also report the problem through the app: Settings and privacy → Help → Report a problem. Describe what you see and what you've already tried. Instagram's support team usually responds within a few days.

If your account has been hacked and you can't log in at all, use the "Forgot password" option on the login screen to reset it. If that doesn't work either, go to Instagram's hacked account help page and follow their steps to recover your account. This process can take longer, so act as soon as you notice something is wrong.

Frequently Asked Questions

Will changing my password log me out everywhere?

You'll stay logged in on the device where you changed the password, but Instagram will log you out on other devices within a few hours. You can also manually log out from Settings and privacy → Security and login → Where you're logged in if you want to end sessions right away.

Can I change my password if I don't remember the old one?

Yes. On the Instagram login screen, tap "Forgot password?" and enter your email or phone number. Instagram will send you a reset link. Click it, create a new password, and log back in. This works even if you haven't logged in for months.

What if I use the same password on Instagram and other accounts?

Change the password on all of those accounts too. If one account is breached, hackers will try your email and password on every other site. Using a unique password on each account means a breach on one site doesn't put the others at risk.

Is a password manager safe to use?

Yes, if you choose a reputable one like Bitwarden, 1Password, or Dashlane. These tools encrypt your passwords so that even the company running the manager can't read them. The trade-off is that you're trusting the company's security — but that's still safer than reusing weak passwords or writing them in an unencrypted note.

Do I need two-factor authentication if I have a strong password?

A strong password is important, but two-factor authentication adds real protection. Even with a strong password, phishing, malware, or a data breach on another site could expose it. Two-factor authentication stops someone from logging in even if they have your password.