Instagram login: how to sign in on the web and in the app, fix errors, and stay secure in 2026

Instagram login guide for 2026: sign in on web or app with email, phone or Facebook, fix errors, reset your password, set up 2FA and spot fake login pages.

Updated: September 25, 2026 · 11 min read

Instagram login happens on the official app or at Instagram.com, using a username, email address or phone number plus your password. If you have forgotten it, use the Forgot password link on Instagram's own login screen to reset it — never a link someone sent you. Two-factor authentication and logging out of all sessions are the two fastest ways to lock an account down.

Logging in should be the easy part of Instagram. In practice it is where most account problems start: a password that suddenly stops working, a login code that never arrives, a page that keeps reloading, or a convincing copy of the login screen that isn't Instagram at all. This guide walks through the official ways to sign in, what to do when they fail, and how to make your next login much harder to hijack.

Everything here uses Instagram's own methods only — the app from the App Store or Google Play, or instagram.com typed into your browser. No third-party tool can log you in, recover your account, or unlock someone else's content, and anything that promises that is worth treating as a scam.

How to log in to Instagram on the web

Open a browser on your computer and type instagram.com straight into the address bar rather than clicking a link from an email or a message. On the login screen, enter the username, email address or phone number attached to your account, then your password, then click Log in. Instagram supports current versions of Chrome, Safari, Firefox and Edge, so if the page looks broken or half-loaded, update your browser first.

Once you are in, Instagram usually offers to save your login info and, for accounts linked to Facebook, shows a Log in with Facebook option. On a shared or public computer, choose Not now and log out when you finish. If a session is already open, Instagram may simply ask you to continue with that account instead of typing credentials again.

Only sign in at instagram.com — no other domain hosts the real login form.
Check the padlock and the spelling of the domain before typing a password.
Use a private browsing window on shared machines so the session is not stored.

If the login page keeps reloading

A login page stuck in a loop is almost always a browser issue, not an account issue. Try a private window, disable extensions or ad blockers for the site, clear cookies and cache, and check that third-party cookies are not blocked. Switching from Wi-Fi to mobile data sometimes clears it as well. If the web version still refuses to cooperate, sign in through the official Instagram app instead.

How to log in to Instagram in the app

Install Instagram from the Apple App Store or Google Play, open it, and tap Log in — or Log into another account if the app already shows a session. Enter the same identifier you would use on the web plus your password, then tap Log in. The app will offer to save your login details; declining is fine, and you can turn on face or fingerprint unlock later in your settings.

After signing in you can add a second account and switch between them without logging out — tap your profile picture on the feed to see the account switcher. If the app itself is the problem, spinning on the login screen or rejecting a password that works on the web, update it, restart your phone, and try once more before anything else.

Download only from the App Store or Google Play, and check the listing says Instagram from Meta.
Reinstalling the app should be your last step, not your first.
If a password works on the web but not in the app, the app is the suspect, not your password.

Instagram accepts your username, your email address or the phone number linked to the account in the same field at the top of the login screen. Which one works depends on what is currently attached to the account — if you signed up with a phone number and later removed it, that number will not get you in. You can add or update an email and phone number in your settings once you are logged in.

Where an account is linked to Facebook and the option is available in your region, Log in with Facebook appears under the login form. It opens Facebook's own login page and asks you to authorise the connection, so your Facebook password is typed into Facebook, not Instagram. Keep your Instagram password known anyway: if that link is ever removed, Facebook alone will not get you back in.

Nearly every login error falls into one of three buckets: the credentials really are wrong, you have been temporarily rate-limited after too many attempts, or the app or browser is misbehaving. Here is what the usual messages mean and what actually helps.

'Sorry, your password was incorrect' — check Caps Lock and autofill, and make sure there is no stray space. If it fails again, use Forgot password instead of guessing.
'Please wait a few minutes before you try again' — a temporary block from repeated attempts. Stop tapping, wait 15 to 30 minutes, and retry on the device you normally use.
'We suspect automated behavior' — Instagram has flagged the pattern of attempts. Give that network a rest for a while.
'There was a problem logging you into Instagram' — usually an app or connection issue. Update the app, restart your phone, or switch between Wi-Fi and mobile data.
Login codes that never arrive — check spam, confirm the email or phone number on the account, and request one new code, not five.
'Your account has been temporarily locked' — complete the identity check Instagram itself shows you. No payment and no third-party unlock service is involved.

Forgot your Instagram password? Reset it the official way

On the login screen, tap or click Forgot password. Enter the username, email address or phone number tied to the account, then choose where to send the reset. Instagram sends a link or a code that lets you set a new password. Open it in the same browser or app you requested it from, choose a long unique password, and store it in a password manager this time.

Once you are back in, Instagram will offer to log out of other devices — accept it if there is any chance someone else had access, and change any other account that reused that password. Instagram never emails or messages you asking for your current password. A reset email you did not request means someone is actively trying to get in, so treat it as an alarm.

Logging in with a link or code instead of a password

Instagram can email you a login link or text a one-time code so you never type your password at all. On the web, look for the option after entering your username; availability varies by region and account. You enter the identifier, ask for the link or code, then open the message and tap through. That link logs you into the account tied to that email, so treat it exactly like a password.

Check before you click. The message should arrive right after you asked for it, and the page it opens should still be on an Instagram domain. Login links and verification codes should never be forwarded, screenshotted or typed into a site that asked you for them — a code someone else can read is a code someone else can use. If a code arrives unrequested, deny the prompt in the app and change your password.

Two-factor authentication: the biggest upgrade to your Instagram login

Two-factor authentication means your password alone is no longer enough. Set it up under Settings, then Accounts Center, then Password and security, then Two-factor authentication, and pick an authentication app, SMS or WhatsApp as your second method. An authentication app is the most reliable; SMS is the easiest but depends on your number staying current. Whichever you pick, save the backup codes offline — that is your way back in when a phone is lost or replaced.

Here is the part most people miss: two-factor authentication turns a silent takeover into a visible one. If you get a login request asking you to approve a sign-in you did not start, someone has your password. Deny it, change the password immediately, and log out of all sessions. The second factor did its job — now fix the first one.

How to log out of Instagram on all devices

Go to Settings, then Accounts Center, then Password and security, then Where you're logged in. You will see every device and browser holding a live session, with a rough location and a last-active time. Select anything you do not recognise, or an old phone you no longer own, and log it out. On the web you may also see Log out of all sessions in the profile menu, which ends everything at once.

Change the password in the same sitting. Logging devices out without changing the password only slows an intruder down, because they still hold the credential. Change it, confirm the email address and phone number on the account are still yours, and skim the connected apps list for anything unfamiliar. Then sign back in only on the devices you actually control.

A phishing page is a copy of the Instagram login screen hosted on somebody else's domain. It can look identical — same fonts, same button, same background image. The only reliable tell is the address bar. Instagram's real login lives on instagram.com and nowhere else: not instagram-login, not insta-verify, not a shortened link, and never a form embedded inside a DM or an email.

If you already typed your password into a fake page, move quickly. Change your Instagram password from the official app or website, turn on two-factor authentication, log out of all devices, and report the page. Do the same for any other account that shared that password. Sites promising private-account access or instant verification are harvesting credentials — private accounts stay private, and no tool can change that.

Type the address yourself or open the app instead of tapping a link.
Judge the page by the domain, not by how professional it looks.
Treat any DM offering followers, verification or a private-profile viewer as a scam.

Where FollowPeek fits in — and what it will never ask you for

FollowPeek is an independent Instagram analytics app for iOS and Android. It tracks your followers and unfollowers, shows your follower growth over time, and analyses any public profile: follower and following counts, engagement rate, average likes and comments per post, and posting times. It runs on public data, so it never needs access to your Instagram account to do its job.

What it does not do matters just as much. FollowPeek cannot log you in to Instagram, cannot recover a locked or hacked account, and never asks for your Instagram password — anything claiming otherwise is impersonating an app like ours. No app can show you who viewed your profile either; professional accounts only see the number of profile visits in Insights, and anyone can see who viewed their own story. FollowPeek is not affiliated with Instagram or Meta Platforms, Inc.

4.2/5 · 6,060 · App Store + Google Play

Download on theApp Store GET IT ONGoogle Play

Frequently asked questions

Can I log in to Instagram with my email instead of my username?

Yes, as long as that email address is currently attached to the account. The login field accepts a username, email address or phone number, and you use whichever one the account is set up with. If none of them work, go through Forgot password rather than continuing to guess.

Is logging in with Facebook safe?

It is an official Instagram option where your account is linked to Facebook and the feature is available in your region. It opens Facebook's own login page and does not hand your Facebook password to Instagram. Just make sure you also know your Instagram password, because the Facebook route is not always there.

Why does Instagram say my password is incorrect when I know it is right?

In most cases a stray space, Caps Lock or stale autofill is to blame, but the password may genuinely have been changed by someone else. Use Forgot password once and reset it instead of retrying. Repeated failed attempts trigger a temporary block that can last from 15 minutes to a day.

How do I log out of Instagram on all devices at once?

Open Settings, then Accounts Center, then Password and security, then Where you're logged in, and end every session you don't recognise. Change your password straight afterwards, because logging devices out alone does not invalidate a stolen password. Then sign back in only on the devices you control.

I received a login code I did not request. What should I do?

Treat it as a warning that someone has your password. Do not approve any login prompt in the app, change your Instagram password immediately, turn on two-factor authentication, and log out of all sessions. Also change any other account that used the same password.

Can any app show me who viewed my Instagram profile?

No. Instagram does not share profile visitor data with anyone, so no app, website or service can reveal it. Professional accounts can see the number of profile visits in Insights, and you can see who viewed your own story — that is the limit of what exists. Anything promising more is after your login details.

Can FollowPeek log in to my Instagram account or recover it?

No. FollowPeek never asks for your Instagram password and has no way to sign you in or recover a locked account. It analyses public profile data and tracks your own follower changes, and it is not affiliated with Instagram or Meta Platforms, Inc.

How can I tell whether an Instagram login page is fake?

Look at the domain in the address bar: the real login is on instagram.com only. Be suspicious of any login form reached through a DM, an email, or a page offering followers or private-account access. If you are unsure, close the tab and type the address yourself instead.

Instagram login is one of the few things online where the boring official route is also the fastest. Type the address or open the app, use your real credentials, keep two-factor authentication switched on, and reset your password from Instagram's own screen the moment anything looks off. Do that and the scary login stories mostly happen to other people.