Instagram Privacy Settings: How to Control Who Sees and Contacts You

Menu names were checked against Instagram's Help Center on 4 November 2026. Instagram changes its layout often, so labels may differ slightly on your phone.

Four Settings That Do Most of the Work

1. Switch to a private account if you want to approve who follows you (Settings and activity > Account privacy).
2. Limit who can message, tag and mention you.
3. Turn on Hidden Words to filter abusive comments and message requests.
4. Turn off Show activity status if you don't want others to see when you're online.

For stronger account protection, enable two-factor authentication (2FA) and review your login activity. Then check the things settings cannot fix: the location data that may be hidden inside your photo files, what your bio reveals, and who is already in your followers list.

Public vs Private: What Actually Changes

Two points many guides skip:

• Going private does not remove current followers. Review your list and remove anyone you don't know. Removed people are not notified, although they can request to follow you again.
• Your bio and profile photo stay public. Keep your phone number, school, workplace or home area out of them if you want to stay private.

Business and creator accounts cannot be private while using professional account features. If you need a private account, you must first switch back to a personal account in your account settings. You will lose access to professional features such as Insights. Review our Instagram Business Account Benefits guide before switching.

How to Make Your Account Private

1. Open your profile and tap the menu icon.
2. Tap Settings and activity, then Account privacy.
3. Turn on Private account and confirm.

Review Your Existing Followers

Making your account private does not automatically remove people who already follow you.

1. Open your profile and tap Followers.
2. Review the accounts in your list.
3. Tap Remove beside any account you no longer want following you.
4. Confirm the removal.

Instagram does not notify someone when you remove them, but they may notice that they can no longer see your private content.

Control Who Can Contact You

Messages and Message Requests

Go to Settings and activity > Messages and story replies. Here you can choose who can send you message requests and who can reach your inbox directly. If you receive spam or unwanted messages, restrict requests from people you do not follow. Depending on the options available to your account, you may be able to prevent certain groups from sending requests altogether.

Tags and Mentions

Go to Tags and mentions in the settings menu. You can allow tags and mentions from everyone, from people you follow, or from no one. Turn on Manually approve tags to review a tag before it appears on your profile. Mentions in Stories follow separate rules, especially when the poster has a private account; Instagram's Help Center explains the current behaviour.

Comments

Under Comments, you can limit who can comment, such as everyone, people you follow, or your followers. You can also block specific accounts from commenting on your posts.

Hidden Words

Under Hidden Words, you can filter offensive comments and message requests, and add your own custom words or emojis. Filtered requests go to a separate folder, so you can still check them. This is useful when you want to reduce unwanted interactions without blocking every account individually. Meta's Instagram safety overview describes these interaction controls.

Control What People See

Close Friends

Close Friends lets you share Stories with a selected list. Accounts on the list see a green ring and a Close Friends label. People are not notified when you add them, but they can see that your Story is shared with a smaller group.

Close Friends is not a privacy guarantee. Anyone on the list can screenshot or screen-record what you share. Treat it as an audience filter, not a lock.

Hide Stories from Specific People

Go to Settings and activity > Hide story and live to select accounts that should not see your Stories or Live videos. Use this for coworkers, relatives or acquaintances you follow back but do not want to share everything with. For more ways to manage your Story audience and content, see our Instagram Stories Best Practices guide.

Activity Status

Show activity status, found under Messages and story replies, controls whether accounts you follow or message can see when you were last active. The setting works both ways. If you turn it off, you also cannot see other people's activity status.

Story Resharing

You can control whether others can share your Stories through messages or other Instagram sharing features, depending on the options available in your account's Story settings. Remember that screenshots and screen recordings are not blocked by these settings.

Tools for Harassment and Unwanted Attention

• Restrict: Quietly limits someone. Their comments on your posts are visible only to them unless you approve them, and their messages go to requests. They are not notified that you restricted them.
• Block: Prevents the blocked account from finding your profile, posts or Stories through that account. Instagram may also offer an option to block other accounts the person has or creates.
• Limits: A temporary setting for periods when you suddenly receive a large number of unwanted comments or messages. It can restrict interactions from people who do not follow you or who followed recently.
• Report: Report the post, comment, message or profile using the available reporting option. Our Instagram Community Guidelines article explains what Instagram removes and how appeals work.

If you are in India and face threats, stalking, sextortion, impersonation or financial fraud, report the incident through the National Cyber Crime Reporting Portal or call the cybercrime helpline 1930 for financial cyber fraud.

Save screenshots, profile links, messages and other relevant evidence before blocking the account, where it is safe to do so. This can help if you need to report the incident to Instagram or the authorities.

Secure Your Account with Two-Factor Authentication

Privacy settings control who can interact with you. Two-factor authentication helps protect your account if someone obtains your password. When 2FA is enabled, Instagram asks for an additional verification method when someone tries to log in from an unrecognised device. Instagram's two-factor authentication guidance covers the setup.

How to Enable Two-Factor Authentication

1. Open Instagram and go to your profile.
2. Tap the menu icon and open Accounts Center.
3. Select Password and security.
4. Tap Two-factor authentication.
5. Select your Instagram account.
6. Choose an available verification method and follow the instructions.

Depending on your account, available methods may include an authentication app, text message or WhatsApp. Keep your backup codes somewhere secure. They can help you regain access if you lose your usual verification method.

Review Login Activity

1. Open Accounts Center.
2. Select Password and security.
3. Find the section showing where you are logged in.
4. Review the devices and locations.
5. Log out of any session you do not recognise.

If you think someone already has access, follow Instagram's official hacked-account recovery steps.

Privacy Beyond Settings: Your Photos' Hidden Data

Instagram's privacy menu controls who sees your posts. It does not control all the information contained in an original photo file. Photos taken on a phone may carry EXIF metadata, such as the camera model, date and time, and sometimes GPS coordinates. Whether location information is included depends on the device, camera settings and location permissions.

This matters when you send an original file outside Instagram, for example by email, as a document in a messaging app, or on a forum or marketplace. There are three different things to consider:

• Embedded photo metadata: Information stored inside the original image file, which may include GPS coordinates.
• Instagram location tags: Locations you deliberately attach to posts or other content.
• Real-time location sharing: Location information shared through features or services that use your device's location.

Changing your Instagram privacy settings does not automatically remove metadata from an original photo stored on your device. Before sharing an original photo elsewhere, remove that data from a copy:

• Use the EXIF Remover on our Social Media Tools page to strip supported metadata, including GPS location.
• Keep the untouched original in your private backup.
• Avoid adding exact locations to posts about your home, school or workplace.
• Consider posting after you leave a place rather than sharing your location in real time.

Download a Copy of Your Instagram Information

1. Open your Instagram profile and tap the menu icon.
2. Go to Accounts Center.
3. Select Your information and permissions.
4. Choose Download your information.
5. Select your Instagram account and follow the instructions.
6. Choose the information and date range you want to download.
7. Submit the request and wait for Instagram to prepare your file.

Instagram will notify you when the download is ready. Downloading your information is not the same as backing up your account automatically. Store the file securely and repeat the process when you need an updated copy. Instagram's Download Your Information guidance explains the current options.

A 10-Minute Privacy Checklist

1. Make your account private, or confirm that keeping it public is a deliberate choice.
2. Review your followers and remove strangers.
3. Set who can message, tag and mention you.
4. Turn on Hidden Words.
5. Create a Close Friends list for personal Stories.
6. Decide whether to keep activity status on.
7. Check your bio, profile photo and linked accounts for personal details.
8. Turn on two-factor authentication and review your login activity in Accounts Center.
9. Remove location data from original photos before sharing them outside Instagram.
10. Download a copy of your account information and store it securely.

Teen Accounts and Parents

Instagram Teen Accounts include additional privacy and safety protections for teenage users, with built-in restrictions on who can contact teens, who can tag or mention them, and the type of content they can see.

In India, Meta announced updated Teen Account protections in April 2026. Teenagers under 18 are automatically placed in the updated 13+ content setting and cannot opt out without parental permission. Parents can also choose the stricter Limited Content setting, which filters additional content and removes teens' ability to see, leave or receive comments under posts. The exact features and rollout may vary by country and account.

If you are a parent, review the Teen Account and supervision options available on your teenager's account. Explain why privacy settings matter, encourage them to report uncomfortable interactions, and remind them not to share personal information or live locations with strangers.

Conclusion

Instagram privacy is not controlled by one setting. It depends on how you manage your audience, messages, tags, Stories, account security and the personal information you share. Start by reviewing your account privacy, limiting unwanted interactions, enabling two-factor authentication and checking your login activity. If you run a professional account, our Instagram Analytics Guide explains what Insights you keep by staying public.

Review these settings periodically because Instagram changes its features and menu options. For serious threats, harassment or fraud, use Instagram's reporting tools and contact the appropriate authorities.

Disclaimer: This article provides general information about Instagram's privacy settings. Features, availability and menu names can change. FastSaveMedia is independent and is not affiliated with or endorsed by Instagram or Meta Platforms, Inc.