Instagram security audit
Instagram Security Scorecard
Instagram is the #1 platform for shopping scams and a top channel for romance fraud. Your settings are either protecting you or curating your own scam experience. Let's find out which.
How this works: Check the boxes for settings you've actually enabled. Not settings you meant to enable. Not settings you're pretty sure are on. Actually enabled. Each one is weighted by how much damage it prevents when you get targeted — and on Instagram, it's when, not if.
Account Security
Two-Factor Authentication
Is two-factor authentication enabled on your Instagram?
25pts
Strong Unique Password
Is your Instagram password unique and not reused anywhere else?
15pts
Third-Party App Audit
Have you reviewed and revoked access for apps connected to your Instagram?
10pts
Login Activity Check
Have you reviewed your login activity in the last 30 days?
10pts
Privacy Settings
Private Account
Is your account set to Private?
15pts
Message Controls
Have you restricted who can message you?
20pts
Activity Status Hidden
Is 'Show Activity Status' turned off?
10pts
Tag Controls
Have you set tag approval to manual?
10pts
Story Sharing Controls
Have you disabled 'Allow Sharing to Messages' for your stories?
5pts
Behavior
Phishing Awareness
Do you check 'Emails from Instagram' in settings before trusting any email claiming to be from Instagram?
15pts