Hardening Instagram is no longer just a password change. Account Center puts Meta’s security settings in one place. If you still rely on SMS, old sessions, and unfollower apps, the page stays open from those doors.
These are the same five steps as the Null2Nova Instagram tutorial; here the path is written out so you can follow it on the phone.
Step 1: Drop SMS — use an authenticator app
Two-factor authentication by text message is no longer a solid method. A SIM can be cloned or moved. A better method is an authenticator app such as Google Authenticator or Duo Mobile.
Path in the current update:
Settings and privacy → Accounts Center → Password and security → Two-factor authentication
Select the account and turn on Authentication app. Until the app replaces SMS, this step is not done.
Step 2: Who else is inside the account?
Instagram shows which devices and which cities are signed in. Log unknown devices out immediately.
Path:
Settings and privacy → Accounts Center → Password and security → Where you're logged in
Tap the unknown device and choose Log out. If you typed the password somewhere you do not trust, change the password after you clear the sessions.
Step 3: Do not fall for fake email
A message that says “your account is at risk” is one of the most common ways to steal a password. Instagram keeps official mail in a dedicated list. If a message is not there, treat it as fraud.
Path:
Settings and privacy → Accounts Center → Password and security → Recent emails
Do not use a link in the inbox as your way into settings. Open the app and check that list.
Step 4: Cut third-party apps
Follower and unfollower sites, and some editors, take access. That access can put the page at risk — or Instagram itself can restrict the account.
Path:
Settings and privacy → Website permissions → Apps and websites
In the Active tab, Remove every app you do not recognize. If you need a tool, use an official source and the least access it will accept.
Step 5: Backup codes
If you lose the phone or the authenticator app, the way back in is Instagram’s 8-digit backup codes. Get them and store them somewhere that is not the phone itself.
Path:
Settings and privacy → Accounts Center → Password and security → Two-factor authentication → Additional methods → Backup codes
A printout or an offline password manager is enough. A screenshot in the same phone’s gallery does not help if the phone is gone.
Do not put it off
Finish these five steps today. Save the paths, send them to anyone who runs a work page, and ask in the comments if something is unclear.
More security, network, and IT tutorials live at null2nova.com. A short visual version of this guide is also on the Instagram page.