Loading page
About this tool
Tracked 30-point Instagram privacy audit — account privacy, tags, story audience, DM controls, ad data and login security, scored by risk profile.
This checklist walks all 30 privacy controls that decide who can find, see, message and profile you on Instagram, and scores what is still open. It covers account privacy, contact syncing, tags and mentions, story audience, message controls, Hidden Words, the Meta Accounts Centre ad settings and login security, weighting each control by how much exposure it actually removes. Choose the risk profile that matches your situation — a public creator, a teen account or someone leaving an unsafe relationship all need different settings tightened first.
Open Instagram Privacy Settings Checklist on AltFTool — it loads instantly in your browser.
Add your input to the workspace.
Adjust the options until the result looks right.
Copy or download the output and put it to work.
Controls are weighted by exposure removed, so the two settings that matter come before the twenty that barely move the needle.
A creator who must stay findable is not marked down for being public; the score shifts to message and account controls instead.
Instagram splits controls between Settings and privacy and Accounts Centre — each item names which one.
Open Settings and privacy > Account privacy and turn on Private account. Only approved followers then see your posts, reels, stories and following list, but existing followers keep access and anything public before the switch may already be cached or screenshotted.
Settings and privacy > Messages and story replies > Message controls, then set the 'others on Instagram' row so they cannot send requests. Story replies are a separate control on the same screen, so tighten both — otherwise someone blocked from messaging still reaches you through a story reply.
No. The toggle only stops future uploads; deleting what was already sent is a separate action in Accounts Centre > Your information and permissions > Upload contacts. Until you do both, your account can still be suggested to everyone who has your number saved.
Two-factor authentication with an authenticator app, then account privacy. Two-factor is what stops an account takeover, and SMS codes are weaker because a SIM swap defeats them; privacy settings only protect an account you still control. This is general information — if you are dealing with stalking or harassment, contact local support services or the police as well.