A good Instagram privacy settings checklist covers five areas: who can see your content, who can contact you, what your profile reveals, how secure your login is, and which apps and accounts are connected. Work through each one in Settings, then check your profile from the outside to confirm the result. The InstaPv team put together this checklist so you can review everything in about fifteen minutes.
Key Takeaways
- Decide first whether your account should be public or private.
- Limit who can message, tag, mention and comment on you.
- Use Close Friends and story hiding for personal moments.
- Turn on two-factor authentication and remove unknown linked apps.
- Review your bio, old posts and followers every few months.
1. Who Can See Your Content
Account visibility is the setting that matters most. On a public account, your posts, reels and stories can be seen by anyone. On a private account, only followers you approve see them.
Instagram’s help page on making your account private gives the current steps: open Settings, find Account privacy under “Who can see your content”, switch on Private account and confirm. The same page notes that accounts for under-18s are private by default, and that business profiles cannot be made private without switching back to a personal account.
Not sure which suits you? Our explainer on public vs private Instagram accounts compares the two in detail.
Checklist for visibility
- Choose public or private based on how you actually use the account.
- Remove followers you do not recognise, since going private does not remove existing followers.
- Archive old posts you no longer want on your grid.
- Check which accounts can see your stories, and hide them from specific people if needed.
2. Stories and Close Friends
Stories often reveal where you are right now, so they deserve their own check. A Close Friends list lets you share some stories with a hand-picked group instead of all followers. Our guide to Instagram Close Friends stories explains how the list works and who can see what.
Also review whether others can reshare your stories and posts, and whether replies to your stories are open to everyone or limited. Posting location-based stories after you leave a place, rather than while you are there, is a simple habit that adds a lot of protection.
3. Who Can Contact and Tag You
Strangers most often reach people through messages, comments, tags and mentions. Each of these has its own control in Settings, usually under sections about messages and how others can interact with you. Menu names change over time, so look for these options rather than exact labels.
| Setting | What to check | Suggested choice |
|---|---|---|
| Message requests | Who can send you messages | People you follow, or filtered requests |
| Comments | Who can comment on your posts | Followers only for personal accounts |
| Hidden words | Filtering offensive words and phrases | Turned on, with your own word list added |
| Tags | Who can tag you in photos | People you follow, with manual approval |
| Mentions | Who can @mention you | People you follow |
| Activity status | Whether others see when you were last active | Off if you value privacy |
| Restricted and blocked accounts | Who is limited or blocked | Review and update the lists |
For a deeper walkthrough of these controls, see our guide on how to protect your Instagram from strangers.
4. What Your Profile Reveals
Even a private account shows your profile picture, name, username and bio to everyone. The UK National Cyber Security Centre’s advice on using social media safely recommends reviewing your privacy settings and limiting personal details, because criminals can use your digital footprint for identity theft or more convincing phishing.
- Remove your phone number, home address, school or workplace from your bio unless you need them there.
- Use a profile photo you are happy for anyone to see.
- Turn off location tags on posts by default.
- Avoid sharing images of tickets, ID cards, boarding passes or house numbers.
- Check posts you have been tagged in, and remove tags you are not comfortable with.
5. Login Security and Connected Apps
Privacy settings only work while you control the account. A stolen login undoes every choice above, so this part of the checklist is essential.
- Turn on two-factor authentication. Our step-by-step guide on turning on Instagram two-factor login shows how.
- Use a long, unique password that you do not reuse elsewhere.
- Confirm the email address and phone number on your account are current.
- Open Accounts Center and remove any linked accounts you do not recognise.
- Review apps and websites connected to your account, and remove ones you no longer use.
- Check where you are logged in and log out of devices you do not recognise.
6. Check Your Profile From the Outside
Once you have worked through the list, see what a stranger sees. Log out, or use the InstaPv tool for public profiles, and look up your own username. On a private account you should see only your basic profile details.
If your account is public, this view shows exactly what anyone can access. Our profile viewer guides explain what public profiles display, and you will find more advice in the Privacy & Safety section.
How Often to Review Your Settings
A quick review every few months is a sensible routine. It is also worth repeating the checklist after a major app update, when you change jobs or move home, or if you start using your account differently, such as switching to a creator profile.
Keep the checklist short enough that you will actually do it. Fifteen minutes a few times a year is far better than a perfect review you never get round to.
Safety note: Never share your password or login codes with anyone, including apps promising extra followers or “private profile” access. Respect other people’s privacy too: honest viewers such as InstaPv show public content only, so only view content they have chosen to make public, and never use what you find to harass or track anyone.
Frequently Asked Questions
What is the most important Instagram privacy setting?
For most personal accounts, the choice between public and private matters most, because it decides who can see your posts and stories. After that, two-factor authentication is essential, since a stolen login cancels out every other setting. Message and tag controls come next, as they limit how strangers can reach you directly.
Can people still see anything if my Instagram is private?
Yes. Your profile picture, name, username and bio remain visible to anyone, along with your follower and following counts. That is why it is worth keeping personal details out of your bio and choosing a profile photo you are comfortable sharing. Your posts, reels and stories stay limited to approved followers.
Does making my account private remove existing followers?
No. Switching to private only affects new people who want to follow you; anyone already following you keeps access. Scroll through your follower list after changing the setting and remove accounts you do not know or no longer want seeing your content. Removed followers will need to request again.
