Every Instagram Privacy Setting, Explained in Plain English
Published 30 June 2026
Instagram has accumulated a long list of privacy settings over the years, scattered across half a dozen menus and renamed several times. This article walks through each one in plain English: what it actually controls, what it doesn't, and which defaults are worth changing for most users.
The headline setting: public vs private account
Switching your account to private is the single largest privacy change available on Instagram. When your account is private, only approved followers can see your posts, stories, reels, and the contents of your followers and following lists. Non-followers see only your profile picture, name, bio, and follower count.
Important: making your account private does not retroactively remove your content from anyone who already follows you. They keep their access until you remove them as a follower. It also doesn't affect anything outside Instagram — public web mirrors and archived pages of content you posted while public may persist.
Most personal users benefit from a private account. The only reasons to stay public are if you're building a brand or audience that depends on discoverability, if you genuinely want strangers to be able to find your work, or if you're using the account in a public-figure capacity.
Story-level privacy
Hide Story From
This setting lets you exclude specific followers from seeing your stories. They remain followers and continue to see your feed posts, but stories are invisible to them. It's the right tool when you have followers you don't want to remove but also don't want to share casual moments with — relatives, ex-coworkers, that one person from school.
Close Friends list
The green-circle "Close Friends" feature lets you publish stories visible only to a hand-picked list of followers. The people on the list are not notified that they're on it, only that the story is part of your Close Friends list. Many users build a "real friends only" private dimension this way without going through the friction of making their whole account private.
Allow Replies and Sharing
Buried inside Story settings: you can disable replies to stories entirely, or restrict them to people you follow back. You can also disable sharing of stories as messages. Worth restricting if you're getting unsolicited DMs from story viewers.
Comments and interactions
Restrict
One of Instagram's most underused features. "Restricting" a user means their comments on your posts are visible only to them — they think they've posted publicly, but the comment is hidden from everyone else unless you approve it. They also can't see when you're online or whether you've read their messages. Restrict is the right answer for low-level harassment that doesn't yet rise to blocking.
Hidden Words
Hidden Words filters comments and DM requests containing specified terms before they reach you. Instagram maintains a curated default list (slurs, common harassment phrases) and you can add your own. Worth enabling, especially for accounts that get any volume of public attention.
Comment Filters
Lets you require manual approval for comments containing certain words, or block all comments from accounts you don't follow. Useful if your comment section has become a chore to moderate.
Tagging and Mentions
Defaults allow anyone to tag you in posts or mention you in stories. You can restrict this to "people you follow" or "no one." Tag-spam is real — random accounts tag thousands of users in promotional posts. Tightening this default cuts most of it out.
Message privacy
Message Controls
Determines who can send you DMs directly versus into a "message request" queue you have to approve. By default, anyone on Instagram can send a message request. You can restrict to people you follow, or to mutual follows. Tightening this is one of the highest-value privacy changes you can make if you don't run a public-facing account.
Sensitive Content Control
Determines how aggressively Instagram filters sensitive content from Explore and Reels. Defaults to "Standard." Setting it to "Less" surfaces more sensitive content; "More" filters more aggressively. Worth checking if Explore is showing content you don't want to see.
Location and metadata
Location tagging
Instagram doesn't automatically tag posts with your location, but it remembers locations you've used recently and suggests them. The privacy implication is that location tags publish information about where you were at a specific time. For sensitive locations (your home, regularly-visited places), be deliberate about tagging.
Photo metadata
When you upload a photo to Instagram, the platform strips EXIF metadata (including GPS coordinates) before publishing. This protects you from inadvertently leaking the GPS coordinates of where the photo was taken — a real risk in other apps that preserve EXIF.
Account discovery
Similar Account Suggestions
By default, Instagram includes your account in "similar accounts" recommendations shown to people who view related profiles. You can disable this so your account is never recommended as similar to another. Reduces some discoverability; useful for users who want to be findable only by direct search.
Phone Number and Email Discovery
Determines whether people with your phone number in their contacts can find your Instagram account, and the same for email. By default, both are enabled. Many users prefer to disable both, especially when the phone number is tied to a long history of contact-list shares.
Activity Status
The "Active now" indicator that shows in DMs and the inbox. You can disable it globally, which also hides your activity from others. The trade-off is that you also stop seeing others' activity statuses.
What Instagram exposes that you can't fully hide
Some things on Instagram are public by design and cannot be made private:
- Your username and profile picture are visible to anyone, even with a private account.
- Your follower count and following count are visible to anyone, even with a private account.
- Posts you're tagged in by other public users may appear in their feed and on their profile.
- Stories you've shared in public Close Friends contexts may have been screenshot.
- Your data export contains your entire follower history, which Instagram itself retains.
The privacy benefits of Instagram's data export
One under-appreciated privacy feature is the data export itself. Under GDPR and California's CCPA, Instagram is required to give you a complete copy of the data they hold about you. Requesting an export, reviewing it, and keeping your own copy is genuinely informative — most users are surprised by what's in there.
You can also use your data export to power analyses that don't require giving any third-party access to your account. Our free tracker uses the export to show you follower relationships, who unfollowed you, and so on, without ever asking for your Instagram password. The export is a privacy-preserving primitive: it gives you control without exposing your credentials.
A five-minute privacy review
If you only do one privacy review this year, do it like this:
- Decide whether your account should be public or private. Switch if needed.
- Open Hidden Words and enable the default filter list. Add any custom terms relevant to your situation.
- Set Message Controls to "people you follow" unless you have a reason to allow open inbox messages.
- Disable Similar Account Suggestions if you don't want to be found via recommendations.
- Turn off Phone Number and Email Discovery unless you specifically use them.
- Review your tagged photos and untag anything you'd rather not have associated with your profile.
This sequence handles 90% of the privacy gains available on Instagram and takes most people under five minutes. The remaining settings are either personal taste (Activity Status) or situational (Close Friends list).
The setting that doesn't exist (and why)
One of the most common questions is whether there's a way to see who's viewed your profile. There isn't — Instagram doesn't track or expose this, and any third-party app that claims to provide it is making it up, usually to harvest credentials. Treat "see who's viewed your profile" tools as scams without exception.
Summary
Instagram's privacy controls are unevenly designed but reasonably comprehensive once you find them. The defaults are not set up for privacy-conscious users — they're set up for discovery. A short, deliberate review will close most of the gaps. The single biggest privacy step remains the simplest: choose whether your account should be public or private, and live with the consequences of that choice rather than trying to half-privatise a public account with peripheral settings.