Since Meta's Meta Account update of 23 April 2026, passkeys work on Instagram as well as Facebook and Messenger. A passkey lets you log in with your fingerprint, face scan or device screen lock instead of typing a password, and Meta says passkeys can't be stolen, shared, guessed or reused. To create one, open your app's settings, then Meta account settings, Login and security, Passkey, Create passkey. You can have up to five per Meta account. Accounts in Meta's Advanced Protection, which include Meta Verified subscribers and accounts with ad tools or large audiences, must create one or they're locked out until they do. Meta says availability varies by app, device and browser, so you may not see the option yet.
What a passkey is and why it's safer
Meta describes passkeys as an easy and secure alternative to passwords that let you sign in or re-verify with your fingerprint, face scan or device screen lock. Meta says that, unlike passwords, passkeys can't be stolen, shared, guessed or reused, because they're stored securely on your device. If you use a fingerprint or face scan, Meta says your biometric data stays on your device and is never shared with Meta.
For account security this matters because there's nothing to type. A fake login page or a message that tricks people into entering their password has nothing to capture when you log in with a passkey.
Instagram is new to this. In its announcement of the Meta Account on 23 April 2026, Meta said passkeys would now work on Instagram, in addition to Facebook and Messenger. The switch from Accounts Center to Meta Account is rolling out gradually over a year, and Meta's help page says passkeys may not be available for everyone yet.
How to create a passkey for Instagram
Meta may prompt you to create a passkey when you sign in. To set one up yourself:
- Open the settings of the app you're using.
- Tap or click Meta account settings.
- Tap or click Login and security.
- Tap or click Passkey, then Create passkey, and confirm with your screen lock, fingerprint or face.
Meta says not to create a passkey on a public or shared device. It may also upgrade your existing login to a passkey automatically when you sign in with your device's password auto-fill; that doesn't change how you log in. To stop it, turn off Allow automatic passkey upgrades in your device's password settings.
How to log in to Instagram with a passkey
- On the app's login screen, choose Use passkey when it's offered, or pick the passkey from your auto-fill menu, then confirm with the same fingerprint, face scan or screen lock you use to unlock the device.
- On a new device, such as a guest computer, you may see a QR code. Scan it with your phone to sign in, even without a passkey on that device. Bluetooth has to be on for both devices.
- Synced passkeys are available on every device signed in to the same cloud service, such as iCloud Keychain or Google Password Manager. Device-bound passkeys stay on the device that created them.
Device requirements
| Device or setting | What Meta requires |
|---|---|
| iPhone | iPhone 8 or later on iOS 16 or later, with iCloud and two-factor authentication turned on |
| Android | Android 9 or later with a device lock enabled |
| Computer | Windows 10 or later, or macOS Ventura or later |
| Browser | Chrome 109, Safari 16 or Edge 109, or later versions |
| Number of passkeys | Up to five per Meta account |
If the option is missing or creation fails, Meta's checklist is: update the app, turn on your screen lock, turn on iCloud Keychain on Apple devices, turn on Bluetooth to use a phone to sign in on a computer, and leave Incognito or private mode, where passkeys may not work.
Who has to use a passkey
Meta requires a passkey from accounts enrolled in Advanced Protection, which defends accounts at higher risk of phishing attacks. Meta lists, among others:
- accounts with access to advertising or business tools;
- accounts connected to Pages or profiles with a large number of followers or wide reach;
- accounts connected to businesses that advertise with Meta, such as Page admins or accounts in a Business Portfolio;
- creators and businesses subscribed to Meta Verified;
- civic actors such as politicians and journalists.
If you're required to create a passkey and don't, Meta says you'll be locked out of your account until you create one. Removing the only passkey from an account that requires one can also cut off access until you create a new one.
Manage, remove and troubleshoot passkeys
Each passkey is listed with the email address or phone number it's linked to, where it's stored and the date it was created. To remove one: settings, Meta account settings, Login and security, Passkey, then Remove next to it. Meta says removal is permanent, may ask for your password or a one-time code, and that you may also need to delete the passkey from your device or password manager separately. If your account doesn't require a passkey, you return to other sign-in methods, such as your password.
Because of that, keep your password, your two-factor method and your backup codes up to date even after you start using passkeys. If you lose the phone that held a device-bound passkey, those are what get you back in.
WhatsApp is separate: Meta says WhatsApp passkeys can't be used to log in to other Meta apps, and Meta passkeys can't be used to log in to WhatsApp.
Frequently asked questions
Does Instagram support passkeys?
Yes. Meta said on 23 April 2026 that, with the Meta Account, passkeys work on Instagram as well as Facebook and Messenger. Availability varies by app, device and browser, so not everyone sees the option yet.
Where is the passkey setting on Instagram?
In your settings, under Meta account settings, Login and security, Passkey. Choose Create passkey and confirm with your screen lock, fingerprint or face.
Why is Instagram asking me to create a passkey?
Meta may suggest one when you sign in. If your account is in Advanced Protection, for example because you subscribe to Meta Verified or manage ads, a passkey is required and you're locked out until you create one.
Can I use my WhatsApp passkey to log in to Instagram?
No. Meta says WhatsApp passkeys can't be used for other Meta apps, and Meta passkeys can't be used for WhatsApp.
How many passkeys can I have?
Up to five per Meta account. Each one shows the linked email or phone number, where it's stored and when it was created.
Locked out after a passkey or Advanced Protection prompt?
Tell us what Instagram asked you to do and what you see now. We'll check your case for free and point you to the official route that fits. We never ask for your password or any code.
Sources
- About Meta passkeys (Meta Help Center) meta.com
- Meta Account: The Simpler Way to Access Your Apps and Devices (Meta Newsroom, 23 April 2026) about.fb.com
- Securing your Meta Account with two-factor authentication (Instagram Help Center) help.instagram.com
- How you can use a backup code on Instagram (Instagram Help Center) help.instagram.com
- About Meta Verified for creators (Instagram Help Center) help.instagram.com