Instagram accounts are stolen through fake login pages and shared codes every day in Pakistan. Speed matters: the sooner you act, the more recovery options Instagram gives you. This guide is for your own account only.
1. Use the official forgot-password flow
On the Instagram login screen tap Forgot password?, enter your username, email or phone number, and follow the reset link or code sent to your email or SMS. Set a brand-new password you use nowhere else.
2. Check your email for Instagram security messages
Instagram emails you when the account email is changed. If you see such a message and it was not you, use the secure/revert option inside that official email immediately — those links expire. Also check spam/promotions folders.
3. If login details were changed
From the login help screens, choose the option that you no longer have access or that your account was compromised, and follow the in-app identity steps Instagram shows — this can include verifying details or a video selfie check inside the official app. Only do this inside the real Instagram app, never on a website someone sent you.
4. After recovery — lock it down
- Two-factor authentication: Settings → Accounts Centre → Password and security → Two-factor authentication → choose an authentication app (best) or SMS.
- Login activity: same area → Where you are logged in — log out every device you do not recognise.
- Check email and phone: confirm the email and number on the account are yours, not ones added by someone else.
- Change your email password too if it was the same as the old Instagram password.
Prevent the next attempt
Never log in on pages linked from DMs promising followers, verification badges or prizes. A real Instagram login only happens in the app or on instagram.com — check the address before typing anything.
Frequently asked questions
Instagram is not sending my reset code. What now?
Wait a few minutes, check spam folders, confirm you entered the exact username/email/phone on the account, and try the login help flow from the app on a device you used before. Repeated rapid requests can delay codes.
Is an authentication app better than SMS for two-factor?
Yes — an authenticator app keeps working if your SIM is swapped or out of signals, and its codes cannot be intercepted by SMS tricks. Save the backup codes somewhere safe at home.
Someone is posting from my account but I can still log in. What first?
Change the password immediately, log out all other sessions in Login activity, turn on two-factor, and remove any email/phone you do not recognise from the account.
