The eight settings to change today: (1) Two-factor authentication ON, (2) Private account ON, (3) Activity Status OFF, (4) Story replies → People You Follow, (5) Tags → require approval, (6) Comments → filter offensive, (7) Close Friends configured, (8) Restricted list set up. Detailed walkthrough below.
Instagram's privacy settings have multiplied over the years. There are now 28 distinct toggles spread across six different menus. Some matter a lot. Some are theater. Here's the complete map, in order of impact, with recommended values for the average user.
If you only do one thing on this list, do the first one.
1. Two-factor authentication (the most important one)
Path: Settings → Security → Two-Factor Authentication
Recommended: Authenticator app (not SMS). Authenticator apps like Authy or 1Password don't suffer from SIM-swap attacks, which have become the #1 method of stealing Instagram accounts in 2026.
Why it matters: account theft, not viewing privacy, is the biggest real-world Instagram threat. 2FA stops 99% of automated takeover attempts.
2. Account Privacy (private vs. public)
Path: Settings → Privacy → Account Privacy
Recommended: Private for personal accounts. Public for brands and creators who want growth.
When private: only approved followers see your posts, stories, reels, follower list, following list. Third-party viewer tools cannot access your content. Tagged posts still respect your privacy.
3. Activity Status (the "online now" green dot)
Path: Settings → Privacy → Activity Status
Recommended: Off.
This is the green-dot indicator in DMs that shows when you're online. It's a trivial setting that leaks more about your routine than people realize. Turning it off hides your activity, but also hides others' activity from you. Fair trade.
4. Story Privacy
Path: Settings → Privacy → Story
Five sub-settings worth configuring:
- Hide story from: add specific users you don't want to see your stories (often more useful than blocking).
- Allow message replies: set to "People you follow" to stop random DMs from strangers reacting to your stories.
- Allow sharing: turn off if you don't want your stories reshared to others' stories.
- Save to archive: on - useful for revisiting old stories.
- Save story to gallery: on - saves automatically to your camera roll.
5. Tags and Mentions
Path: Settings → Privacy → Tags / Mentions
Recommended: Manually approve tags + People you follow can mention you.
Tags create unwanted visibility - anyone can tag you in a post and it appears on your profile by default. Approval prevents this. Mention restrictions prevent random accounts from pulling you into DM threads or comment chains.
6. Comments filter
Path: Settings → Privacy → Comments
Three sub-settings:
- Hide offensive comments: on. Instagram's classifier is decent and catches obvious abuse.
- Manual filter: add words/phrases you want hidden. Useful for muting drama or specific terminology.
- Block comments from: add accounts whose comments you want auto-hidden.
7. Close Friends list
Path: Profile → Menu → Close Friends
Close Friends is a story-only feature: any story you post to your Close Friends list is only visible to that subset of your followers. Recommended use: post the unfiltered, off-script content here. Keep the public stories curated.
8. Restricted accounts
Path: Settings → Privacy → Restricted Accounts
Restricted is a softer version of blocking. The restricted user's comments on your posts are only visible to them - others (including you) don't see them unless you approve. They can still see your profile and stories, but they can't tell they've been restricted. Useful for people you don't want to block outright but whose engagement is unwanted.
9. Story view list
Important note: Instagram doesn't let you hide who viewed your story from your own viewer list. You can hide your story from specific people (above), but you can't hide that you watched someone else's story by adjusting your settings. For that, see our anonymous viewing guide.
10. Login activity & security
Path: Settings → Security → Login Activity
Check this every few months. It shows every device currently logged into your account. Revoke any you don't recognize.
Quick reference table
| Setting | Recommended | Impact |
|---|---|---|
| Two-factor auth | Authenticator app | Account safety |
| Account privacy | Private | Content visibility |
| Activity status | Off | Online presence |
| Story replies | People you follow | DM spam |
| Tag approval | Manual | Profile hygiene |
| Mentions | People you follow | Spam mentions |
| Comment filter | On + manual list | Comment quality |
| Close Friends | Configure | Story segmentation |
A few things that AREN'T privacy settings (but feel like them)
Some "privacy" things aren't actually controllable:
- Read receipts in DMs: only toggleable via "Vanish Mode," not as a general setting.
- Who can see your following list: tied to overall account privacy.
- Story screenshot notifications: Instagram does not notify for regular stories - only for vanish-mode DM photos. Anyone can screenshot your story silently.
Frequently asked questions
What's the most important Instagram privacy setting?
Two-factor authentication is the single most important setting because it protects your account from being stolen. Account privacy (public vs. private) is the most impactful for content visibility.
Does setting my account to private hide my old public posts?
Yes, going private hides all posts from non-followers. However, archived/cached versions of posts that were public may still exist on Google or the Wayback Machine.
Can I see who restricted me on Instagram?
No. Instagram intentionally hides Restricted status from the restricted user. They can still see your profile but their comments are hidden from others until you approve them.
How do I know if my account has been compromised?
Check Settings → Security → Login Activity. It lists every device currently logged in. Revoke anything you don't recognize, then immediately change your password and enable 2FA if you haven't.