Lost your Instagram two-factor codes? How to get back in

What to do first

Stop requesting new codes over and over. Each failed attempt can add friction, and codes that arrive late are often the ones you already triggered. Take two minutes to list what you still have:

• A phone or tablet where Instagram is still logged in, even an old one.
• Saved backup codes (a screenshot, a notes app, a password manager).
• Access to the email address or phone number on the account.
• A Facebook account linked to Instagram through Accounts Center.

Any one of these gives you a way in. If you have none, skip to Step 4.

Step 1: Use a backup code

When you turned on two-factor authentication, Instagram showed a short list of backup codes. If a login code can’t be sent or you can’t reach your usual method, a backup code completes the login. Enter one when Instagram asks for a security code, then change your password and set up a new method straight away.

Each backup code generally works once, so you may need a second one if Instagram asks you to confirm your email or phone before the 2FA prompt.

Step 2: Check for a logged-in device

If Instagram is still open on an old phone, a tablet or a computer browser, you can fix this without any code. Open Accounts Center, then Password and security, then Two-factor authentication, and pick your Instagram account. Under Additional methods you can view or regenerate backup codes, and Instagram’s help pages also describe how to change the phone number used for text-message codes.

Add an authentication app as a second method while you are in there. An app on your phone keeps working through a number change, and Instagram recommends it for that reason.

Step 3: Try the Facebook route

If your Instagram is connected to a Facebook account in the same Accounts Center, logging in to Facebook may let you reach the same Password and security settings from there. The menu names change slightly between versions, so follow the wording on your screen rather than a screenshot from an old tutorial.

Step 4: Use Instagram’s official recovery flow

With no device, no codes and no linked Facebook, go to the Forgot password? link on the login screen and ask for a login link by email or text. If you can’t reach either, use the official page at instagram.com/hacked and follow its prompts. Instagram may ask for a video selfie or other details to confirm you own the account.

Use an email address that only you can read when it asks for contact details, and use a device and network you normally use. Meta doesn’t publish a timeline for these checks, so wait for the email Instagram sends rather than starting a second request.

What not to do

• Don’t pay a “2FA unlock” service that asks for your password or a code. A real helper never needs the code that was texted to you.
• Don’t forward a code to anyone who messages you, even a friend. Takeovers often start with a hijacked friend’s chat.
• Don’t create a second account and report the first as hacked. That splits your followers and does not unlock anything.
• Don’t tap “Trust this device” on a shared or public device.

Once you are back in

Save a fresh set of backup codes somewhere other than the phone itself. Add an authentication app, keep the text-message number current, and update the email on the account. If you change phones often, make the move part of the routine: set up the app on the new phone before wiping the old one.