Instagram Privacy Settings Guide (2026)
The Instagram privacy settings most people miss in 2026 sit across five menus: Account Privacy, Messages and Story Replies, Tags and Mentions, Activity Status, and Connected Apps. Default settings leave most of these wide open. Tightening them takes 10 minutes and prevents 90% of common stalking, scamming, and data-leak situations.
This guide walks through every privacy setting that actually matters in 2026, with recommended values for personal accounts, creators, and business accounts.
Why Default Privacy Settings Are Wrong for Most People
Instagram defaults to public visibility on almost everything because public profiles drive engagement. That's good for the platform but bad for you if:
- You have stalkers, harassers, or doxxers
- You don't want strangers DMing you
- You're worried about scams or impersonation
- You don't want your data shared with third-party apps
- You want to control who sees your stories
Even creators who want a public profile should lock down settings the algorithm doesn't care about — like activity status, message requests, and connected app permissions.
Setting 1: Account Privacy (Public vs Private)
The biggest decision: should your whole account be private?
Private Account
- Only approved followers can see your posts, Reels, and Stories
- Strangers see only your profile picture, bio, and follower counts
- Your content cannot appear in Explore or hashtag results
- Major reach loss but maximum privacy
Best for: Personal accounts, accounts being harassed, accounts with sensitive content.
Public Account
- Anyone can see your posts, follow you, and discover your content
- Required for creator features and audience growth
- Tradeoff: more visibility, less privacy
Best for: Creators, businesses, public figures, anyone trying to grow.
How to Switch
Settings → Account privacy → toggle Private account.
You can switch back and forth, but switching to public exposes all your historical content to anyone immediately.
Setting 2: Messages and Story Replies
Default settings let anyone send you a DM. This is the source of most Instagram scams and harassment.
Recommended Settings
Settings → Messages and story replies → Message controls
- Followers on Instagram you don't follow → Message requests
- People who don't follow you on Instagram → Don't receive requests
- Group chat invites → Off (or restrict to followers)
- Story replies → People you follow
This blocks the spam DM flood that hits public accounts. Real people can still find you through your followers.
For Creators
If you need DMs from potential collaborators or fans, use:
- Followers you don't follow → Message requests (filters into a separate inbox)
- Group chat invites → People you follow only
- Story replies → Off entirely if you don't want random replies
Hide Read Receipts
Settings → Messages and story replies → Hide read receipts
This prevents people from knowing whether you've read their DMs. Useful if you're getting harassment or scam attempts.
Setting 3: Tags and Mentions
Anyone can tag you in posts and stories by default. This is how impersonation, scam tags, and harassment spread.
Recommended Settings
Settings → Tags and mentions
- Who can tag you → People you follow (or No one for max privacy)
- Who can @ mention you → People you follow
- Manually approve tags → On (review before they appear on your profile)
Why This Matters
Without these settings, scammers tag you in giveaway posts, hoping you'll click suspicious links. Harassers tag you in offensive posts to associate you with content you didn't create. Approving tags manually blocks both.
Setting 4: Activity Status
By default, Instagram shows when you were last active on the app. Anyone you've DMed can see your status.
Recommended Setting
Settings → Activity status → Off
This hides:
- When you were last active
- Whether you're currently online
- "Active now" indicators in DMs
You can still see other users' activity statuses (but only if you also share yours, so this disables both directions).
Setting 5: Stories Privacy
Stories have their own privacy controls separate from posts.
Story Privacy Settings
Settings → Story → Privacy
- Hide story from — block specific people from seeing your stories
- Allow message replies — Off, People you follow, or Everyone
- Allow sharing — Off (prevents people from sharing your stories to their own)
- Save to archive — On (keeps history for you, doesn't affect others)
- Save to gallery — Personal preference
Close Friends List
For sensitive content you only want some followers to see:
- Profile → Close Friends → Add people manually
- When posting a story, tap the green star icon to share only to Close Friends
Nobody gets notified when added or removed from Close Friends. Use it freely.
Setting 6: Connected Apps
Over time, you've probably authorized dozens of third-party apps to access your Instagram. Most you'll never use again.
Audit Connected Apps
Settings → Apps and Websites → Active
Review the list. For each app you don't recognize or don't use:
- Tap the app name
- Tap Remove
- Confirm
This is critical. Old connected apps are a common vector for hacks and data scraping.
What to Watch For
- Apps you've never heard of
- Apps you used once and forgot
- Apps with names like "follower booster," "growth tool," etc. (always remove)
- Apps from companies that don't exist anymore
For more on suspicious app activity, see our Instagram hacked recovery guide.
Setting 7: Login and Security
The most important security settings live in a separate menu.
Two-Factor Authentication
Settings → Security → Two-factor authentication → Get started
Choose Authentication app (Google Authenticator, Authy) over SMS. SMS-based 2FA is vulnerable to SIM-swap attacks; app-based codes are not.
Login Activity
Settings → Security → Login activity
Review the list. Log out any session you don't recognize immediately. Each entry shows location, device, and time — anything unfamiliar should be terminated.
Saved Login Info
Settings → Security → Saved login info → Remove all on shared or public devices.
Setting 8: Data and Permissions
Most users don't realize how much data Instagram shares with Meta and partners.
Off-Meta Activity
Settings → Privacy → Off-Meta activity → Manage future activity → Disconnect future activity
This stops Instagram from receiving data about your activity on other websites and apps.
Ad Preferences
Settings → Ads → Ad topics
Limit categories of ads you don't want to see. Doesn't reduce ad volume but customizes content.
Data Download
Settings → Accounts Center → Your information and permissions → Download your information
This lets you see exactly what Instagram has on you. It's also the safe way to use unfollow tracker tools — they process this data export instead of asking for your password.
For example, Unfollr is a web app that reads your official Instagram data export to identify ghost followers and unfollowers — it never asks for your password or logs into your account, so it's completely safe to use. That's the difference between a safe tool and a credential-stealing scam. Start a free follower check.
Setting 9: Comments and Interactions
Limit who can comment, react, and interact with your content.
Comment Controls
Settings → Privacy → Comments
- Allow comments from → Followers (or People you follow + their followers for max reach)
- Hide offensive comments → On
- Manual filter → Add words/phrases to hide automatically
- Most reported words → On
Restricted Accounts
Settings → Privacy → Restricted accounts
Restrict (rather than block) lets you stop seeing content from someone without notifying them. Their comments on your posts are only visible to themselves. Useful for low-key harassment situations.
Privacy by Account Type
| Setting | Personal | Creator | Business |
|---|---|---|---|
| Account privacy | Private | Public | Public |
| Messages from non-followers | Off | Requests | Requests |
| Story replies | People you follow | People you follow | Followers |
| Tag approval | On | On | On |
| Activity status | Off | Off | Off |
| Two-factor auth | App-based | App-based | App-based |
| Story sharing | Off | On | On |
| Comment filters | On | On | On |
Adjust based on your specific situation. Public-facing creators may need to relax some settings to enable engagement.
Privacy Mistakes to Avoid
A few common privacy missteps in 2026:
Over-Sharing in Stories
Sharing real-time location, your home, your daily routine, or your kids' faces creates safety risks. Use Close Friends for this kind of content if you must share at all.
Reusing Passwords
Don't use your Instagram password anywhere else. A breach on another site puts your Instagram at immediate risk.
Trusting "Free Follower" Apps
Any app claiming to give you free followers, likes, or analytics in exchange for your password is a scam. Never enter your Instagram password into a third-party app — period.
Ignoring Login Alerts
Instagram sends emails when new logins happen. Read them. If you didn't authorize a login, change your password immediately.
Public Email or Phone
Don't add your real email or phone to your bio. Use a contact form, business email, or alias instead. Public contact info gets harvested by scammers.
When Privacy Settings Aren't Enough
If you're being actively harassed, stalked, or threatened, settings alone won't solve it. Take additional steps:
- Block the harasser (and their alt accounts as they appear)
- Report each instance of harassment to Instagram via the post or DM menu
- Document everything with screenshots in case you need to escalate to authorities
- Switch to private temporarily to cut off discovery
- Change your username if your identity is compromised (only as a last resort)
For Instagram's official safety resources, visit the Instagram Help Center privacy page.
FAQ
What are the most important Instagram privacy settings in 2026?
Account privacy (private vs public), two-factor authentication, message controls, tag approval, and connected app audit. These five cover 90% of real-world privacy risks.
Should I make my Instagram account private?
If you don't need to grow an audience, yes. Private accounts are safer and prevent strangers from seeing your content. Public accounts are necessary for creators and businesses.
How do I stop strangers from messaging me on Instagram?
Go to Settings → Messages and story replies and set "People you don't follow" to "Don't receive requests." Real people can still find you through your followers.
Does Instagram show when I was last active?
Only if Activity Status is on. Disable it in Settings → Activity status to hide when you were last online.
Can I see who looked at my profile?
No. Instagram does not show profile visitors, and any app claiming to do this is a scam. Don't enter your password into such apps.
How often should I review my privacy settings?
Quarterly is enough. Instagram updates settings periodically, so check after each major update too. A 10-minute audit prevents most issues.