Instagram Privacy Settings Checklist for 2026

Ten minutes in Settings locks down most of your Instagram exposure. The essentials: set your account private, control who can DM and tag you, hide your activity status, review connected apps, and turn on two-factor authentication. Here's the full run-through.

Instagram's defaults favor visibility, not privacy. This checklist walks the settings that actually matter in 2026.

1. Account privacy

Settings → Account privacy → Private account. This is the single biggest switch: it hides your posts, stories, reels, and highlights from everyone except approved followers. On public, remember anyone can see and save your content. Choose deliberately.

2. Messages and tags

• Messages: restrict who can DM you and send message requests.
• Tags & mentions: set to "people you follow" or manual approval so strangers can't tag you.
• Comments: filter or limit who can comment.

3. Activity status

Turn off Show activity status so people can't see when you're online or last active. This also stops you seeing theirs — a fair trade for privacy.

4. Story controls

Hide stories from specific people, set up Close Friends for private sharing, and disable resharing of your stories if you don't want them passed around.

5. Security

• Two-factor authentication — turn it on. The most important security step.
• Connected apps: review and revoke third-party access you no longer use.
• Password: unique and strong. Never enter it into third-party "viewer" tools.

6. Audit what's public

See yourself as a stranger does: open your handle in a profile viewer while logged out to confirm exactly what's exposed, then adjust. Do this after any settings change to verify it worked.

FAQ

What's the most important Instagram privacy setting?

Making your account private — it hides content from non-followers.

Should I turn off activity status?

Yes, if you don't want others seeing when you're online.

How do I stop strangers tagging me?

Set tags and mentions to people you follow or manual approval.

Is two-factor authentication worth it?

Yes — it's the single best protection against account takeover.

How do I check what's public on my account?

View it logged out or through a profile viewer.