How to turn on two-factor authentication for Instagram

Short answer

Where the setting is

On Instagram, the setting is in the app: your profile, then Menu, then Password and security, then Two-factor authentication, then Authentication app.

Instagram’s help article says: “When you turn on two-factor authentication, you're asked to choose either text message (SMS) codes or a third-party authentication app as your primary security method.” This guide covers the authentication app.

The article also says: “Keep in mind that you have to be logged into Instagram in order to turn on two-factor authentication.”

And it notes: “We’re gradually updating people to Meta Accounts. You may see either Accounts Center or Meta Account settings as the place to manage your account settings.”

More guides: what two-factor authentication is, and which apps and websites work with an authenticator app.

Steps

Steps

  1. Tap Profile or your profile picture in the bottom right to go to your profile.
  2. Tap Menu in the top right.
  3. Tap Password and security.
  4. Tap Two-factor authentication, then tap the account you'd like to use an authentication app for.
  5. Tap Authentication app, then tap Next.
  6. Enter the confirmation code from the third-party authentication app to complete the process.

These are the steps Instagram gives for using an authentication app in the Instagram app. The article names two example apps, which this guide doesn’t repeat.

Backup

Save your backup codes

This article doesn’t give backup-code steps. Instagram’s list of related articles includes one called “How you can use a backup code on Instagram”, which this guide does not cover. If you are ever shown backup codes, save them somewhere apart from your phone. If you ever lose the phone, see our guide on what to do if you lose your phone.

Source

Source

Instagram Help Center: Use an authentication app for two-factor authentication on Instagram (opens in a new tab). Read on 29 October 2026.

Our turn

Tested by MELKEM

Tested by MELKEM on : worked first time.

Tested means we set up MELKEM Authenticator on that service and it worked. It doesn’t mean the service endorses MELKEM.

We used MELKEM Authenticator, one example of an authenticator app, to test these steps.

Ask MELKEM