Instagram only asks for a two-factor code when you log in from a device it doesn't recognize, so a phone or computer that's still logged in, or one you marked as trusted, may get you in without a code. If not, use a backup code you saved, a code from an authentication app on another device, or a text message code if you still have the same phone number. If you have none of these, ask Instagram for support from a mobile device with a secure email address and confirm your identity. Once you're back in, log out the lost phone and save new backup codes.
What you still have decides the route
Two-factor authentication protects your account by asking for a code when there's a login attempt from a device Instagram doesn't recognize. So the question isn't only "where is my phone?" but "what else can still prove it's me?"
| What you still have | What to use |
|---|---|
| Another phone, tablet or computer that's still logged in | Go to the settings there and get backup codes |
| A device you once marked as trusted | Log in there; no code is asked |
| Backup codes you saved | Enter one instead of the login code |
| Your phone number on a new SIM | Text message codes go to the number |
| An authentication app on a second device | The code from that device |
| None of these | A support request and identity check |
A device that's still logged in or trusted
Check every device you've used Instagram on: an old phone, a tablet, a work computer, a browser. Two things can help:
- Still logged in. You can only see or create backup codes while you're logged in. If any device still has an open session, go to Accounts Center, then Password and security, Two-factor authentication, your account, Additional methods and Backup codes, and save them somewhere other than the lost phone.
- Trusted. Instagram explains that when you log in with two-factor authentication you can tap Trust this device, and you won't be asked for a code on that device again. A device you trusted before may let you log in with just your password.
Backup codes
Instagram says that if you lose access to your phone and can't get login codes, you can log in with a backup code. Each one replaces the login code on the two-factor screen. Look wherever you might have saved them: a screenshot in your photos or cloud storage, a notes app, a password manager, a printout.
Once you use your backup codes, get a new set while you're logged in. Instagram notes that getting new codes cancels your current ones.
Text message, WhatsApp or another authentication app
- Text message. These codes are sent to your mobile number, not to a specific phone. If you can get the same number working on a new SIM, which is something your mobile carrier handles, the codes will reach it again.
- WhatsApp. Instagram can send login codes by WhatsApp, a method that can only be turned on after text message codes.
- Authentication app. An app such as Duo Mobile or Google Authenticator generates the codes on the device it's set up on, so it disappears with that phone. Instagram lets you connect up to five devices to the same authentication app setup; if you added a second one, use it now.
If you have none of these
Without a code, a trusted device or backup codes, the route is a support request to Instagram:
- On the login screen, tap Forgot password? and try to get a login link by email or text message.
- If that doesn't get you in, Instagram says you may be able to request support from a mobile device. Enter a secure email address that only you can access; Instagram emails you the next steps.
- Confirm your identity. For an account with photos of you, Instagram asks for a video selfie of you turning your head in different directions; the video is never visible on Instagram and is deleted within 30 days. For an account without photos of you, Instagram asks for the email or phone number you signed up with and the type of device you used then.
If the email or phone number on the account is also gone, read lost access to the email or phone on your account. If you think someone took the phone to get into your account, follow the hacked-account route instead.
Once you're back in
- Log out the lost phone. In Accounts Center, go to Password and security, then Where you're logged in, choose your account and use Select devices to log out. Step by step: how to log out of Instagram on all devices.
- Remove it from two-factor authentication too. Instagram points out that removing a device from two-factor authentication doesn't log it out, so do both. You can also remove trusted devices once two-factor authentication is on.
- Change your password if the phone may be in someone else's hands. Instagram logs every device out when you change it.
- Save a new set of backup codes somewhere other than your phone.
Set it up so a lost phone can't lock you out
- Save backup codes outside your phone: in a password manager, on paper, or on another device.
- Use an authentication app on more than one device, for example your phone and a tablet. Instagram recommends the authentication app method and allows up to five connected devices.
- Keep your email and phone number current so login links and text message codes still reach you.
- Only trust your own devices. Instagram says not to tap Trust this device on a public or shared device.
Frequently asked questions
How do I log into Instagram if I lost my phone with two-factor authentication?
Use a device that's still logged in or that you marked as trusted, a backup code you saved, a code from an authentication app on another device, or a text message code if you still have the number. If none of these work, request support from Instagram on a mobile device and confirm your identity.
Where do I find my Instagram backup codes?
In Accounts Center, under Password and security, Two-factor authentication, your account, Additional methods, Backup codes. You have to be logged in to see them, so save them in advance.
Can I turn off two-factor authentication without logging in?
No. Two-factor authentication is turned on and off from your account settings, so you need to log in first. If you can't, use a backup code or the support route.
Does removing a device from two-factor authentication log it out?
No. Instagram says removing a connected device from two-factor authentication doesn't log it out, so also log it out from Where you're logged in, or change your password.
Locked out by two-factor?
Tell us what you still have: another device, saved codes, the phone number or nothing at all. We'll tell you for free which route fits. We never ask for your password or any code.
Sources
- Securing your Meta Account with two-factor authentication (Instagram Help Center) help.instagram.com
- How you can use a backup code on Instagram (Instagram Help Center) help.instagram.com
- Turn two-factor authentication for multiple devices on or off (Instagram Help Center) help.instagram.com
- Use an authentication app for two-factor authentication on Instagram (Instagram Help Center) help.instagram.com
- If you think your Instagram profile has been hacked (Instagram Help Center) help.instagram.com
- View your recent Instagram login activity (Instagram Help Center) help.instagram.com
- What to do if your Instagram profile posts unauthorized content (Instagram Help Center) help.instagram.com