How to Update Your Instagram Privacy Settings
Control who can see your photos, stories, and personal information on Instagram — make your account private, limit DMs, and protect your data.
3 min read · 5 steps · Checked April 2026
Step 1. Switch to a private account
Open Instagram → tap your profile icon (bottom right) → tap the three lines (≡) → Settings and PrivacyAccount Privacy → toggle "Private account" on. Your existing followers remain. New ones must request approval.
Step 2. Control who can message you
In SettingsMessages and Story RepliesMessage Controls. Under "Who can send you messages," choose "Followers and people you follow" or "People you follow" to reduce DMs from strangers.
Quick Tip
Setting message requests to "Off for people you don't follow" dramatically reduces spam and scam messages.
Step 3. Limit who can tag you
In SettingsTags → "Who can tag you." Choose "No one" or "People you follow" to prevent strangers from tagging you in posts, which can expose your profile to their audiences.
Step 4. Turn off location sharing
When posting photos, do not add a location. For general location: on iPhone go to SettingsInstagramLocation → "While Using." This limits background location collection.
Step 5. Review which apps are linked to Instagram
In Instagram SettingsApps and Websites, see all third-party apps that have access to your Instagram account. Remove any apps you no longer use by tapping them → "Remove."
Instagram, owned by Meta (the same company as Facebook), defaults to public accounts — meaning anyone on or off the platform can see your photos and profile. For most everyday users and older adults, switching to a private account and tightening privacy settings is highly recommended.
Private vs. Public account: With a public account, anyone can see your posts, stories, and reels. With a private account, only approved followers can see your content. Switching to private also stops strangers from seeing your followers list and who you follow.
Key settings to review
- Account privacy (public vs. private)
- Who can send you messages
- Who can tag you in photos
- Who can see your story
- Whether your account appears in search results
- Location data in posts
Instagram also collects data about how you use the app for advertising purposes. While you cannot fully stop this data collection, you can limit what is shared and how it is used in ad targeting.
Common risks on Instagram: Scammers run fake giveaway accounts, impersonate celebrities, and send direct messages claiming you have "won" a prize. As with any platform, be skeptical of unsolicited DMs and never click links from unfamiliar accounts.
Signs of an impersonation account: A celebrity account asks you to DM them for a "prize," the account was created recently. And it has few posts but many followers — these are red flags.
Official sources
- FTC Consumer Advice — consumer.ftc.gov
- IdentityTheft.gov — identitytheft.gov
- CISA — Stop.Think.Connect. — cisa.gov
- Have I Been Pwned — haveibeenpwned.com
Still stuck?
A real person can walk you through it over the phone.
Get help from a person