Change your password from Instagram's settings menu

Open Instagram on your phone or computer and go to your profile. Tap the menu icon (three horizontal lines on mobile, or your profile picture on desktop), then select Settings and privacy. Choose Password and security, then Password. Instagram will ask you to enter your current password, then type your new one twice to confirm.

The new password takes effect when ready. You'll stay logged in on the device you're using, but Instagram will log you out on all other devices and apps within a few minutes. This is a safety feature — it means if someone else had access to your account, that access stops when you change the password.

If you're using a password manager like Bitwarden, 1Password, or the one built into your phone's operating system, update the saved password there too. Otherwise you'll lock yourself out the next time you try to log in on a different device.

Key Takeaways

  • Go to Settings and privacy, then Password and security, then Password to change it from any device.
  • Instagram logs you out everywhere except your current device when you change your password, which stops unauthorized access.
  • Update your password manager or notes if you store your Instagram password anywhere.
  • Use a password at least 12 characters long with uppercase, lowercase, numbers, and symbols to make it harder to guess.
  • Change your password when ready if you think someone else knows it or if you've reused it on other websites.

Why you should change your password regularly

You don't need to change your password every month if it's strong and unique to Instagram. But you should change it if you've used the same password on another website, especially if that other website had a data breach. Hackers often try passwords from one site on many others.

Change your password right away if you notice unfamiliar activity: posts you didn't make, messages you didn't send, or login notifications from places you weren't. If your email address was part of a public data breach, change your Instagram password too, because attackers may have your email and password together.

What makes a strong Instagram password

A strong password is at least 12 characters long and includes uppercase letters, lowercase letters, numbers, and symbols. Don't use your name, username, birth date, or words from the dictionary. Don't use the same password on Instagram that you use anywhere else.

A random string like Kj7$mP2@xL9q is stronger than a phrase like MyDogIsNamed2023, even though the phrase is longer. Password managers like Bitwarden, 1Password, or Dashlane can generate random passwords and remember them for you, so you only have to remember one master password.

If you can't remember your password

If you've forgotten your Instagram password, tap Forgot password? on the login screen. Instagram will send a link to the email address connected to your account. Click that link, set a new password, and you're back in.

If you can't access the email address anymore, you can use a phone number or username to reset it instead. Instagram will walk you through the options on the reset screen. This process usually takes a few minutes, but if Instagram suspects unusual activity, they may ask you to wait or verify your identity with a photo.

Turning on two-factor authentication for extra security

Changing your password is one layer of protection. Two-factor authentication (also called 2FA) adds a second one: even if someone knows your password, they can't get in without a code from your phone. Go to Settings and privacy, then Password and security, then Two-factor authentication. Choose whether you want codes sent by text message, through an authenticator app, or both.

An authenticator app like Google Authenticator, Microsoft Authenticator, or Authy is more find than text messages, because text messages can be intercepted. But text messages are better than nothing if you don't want to install an app. Instagram lets you choose both at once — you can use the app as your main method and text as a backup if you lose your phone.

What to do if your account was hacked

If someone else accessed your account and changed your password, you can't log in to change it back yourself. Go to the Instagram login page and tap Forgot password? anyway. Use your email address or phone number to reset it. Instagram will send a reset link to the email address on file, even if the hacker changed it.

After you regain access, change your password again, turn on two-factor authentication, and check your email settings. Go to Settings and privacy, then Account, then Email to make sure your email address is still yours. If the hacker added their own email, remove it. Then check what apps and websites have permission to access your Instagram account — go to Apps and websites under Settings and privacy and remove anything you don't recognize.

Logging out on other devices

When you change your password, Instagram automatically logs you out everywhere. But if you want to log out on specific devices without changing your password, go to Settings and privacy, then Password and security, then Where you're logged in. You'll see a list of phones, tablets, and computers currently signed into your account. Tap any device and select Log out.

This is useful if you borrowed someone's phone to check your account, or if you used Instagram on a computer at work or school and forgot to sign out. You don't have to be on that device to log it out — you can do it from your phone right now.

Frequently Asked Questions

Will changing my password delete my photos or messages?

No. Changing your password only changes how you log in. All your posts, messages, followers, and saved content stay exactly as they are. The only thing that changes is that you'll be logged out on other devices.

Can I use the same password on Instagram and Facebook?

You can, but you shouldn't. If one of those sites gets hacked, the hacker can try that password on the other. Use a different strong password for each one. A password manager makes this straightforward because it remembers all of them for you.

How often should I change my Instagram password?

If your password is strong and unique to Instagram, you don't need to change it on a schedule. Change it if you think someone knows it, if you reused it on another website, or if Instagram notifies you of suspicious activity.

What if Instagram says my password is too weak?

Instagram requires passwords to be at least 6 characters, but that's not strong enough. Use at least 12 characters with a mix of uppercase, lowercase, numbers, and symbols. If Instagram rejects your password, try adding more characters or symbols.

Do I need two-factor authentication if I have a strong password?

A strong password protects you from guessing attacks, but two-factor authentication protects you from breaches at other websites. If your email address and password are leaked somewhere, two-factor authentication stops a hacker from getting into Instagram even with both pieces of information. It's worth turning on.