Instagram Privacy Settings You Need to Change (2026)

Your Instagram Privacy Is Probably Wide Open Right Now

A couple weeks ago, I sat down with a friend who's been on Instagram since 2014. She had over 2,000 followers, posted daily, and was genuinely convinced she had her privacy "locked down" because her account was set to private.

Then I showed her what Instagram actually exposes by default. Her activity status was on — meaning every person she follows could see exactly when she was online. Her DM read receipts were active. Her story replies were open to everyone. And she didn't even know Instagram has a setting for who can tag her in posts.

She spent about twenty minutes going through settings and was genuinely surprised by what she found. And she's tech-savvy. If she missed all this, I guarantee most Instagram users are in the same situation.

Instagram doesn't exactly make privacy easy. The settings exist, but they're scattered across different menus, labeled in ways that don't always make their real impact obvious, and set to the most permissive defaults possible. Meta makes money when more of your data and activity is visible, so the default state of your account is basically "share everything."

I've spent the past month going through every privacy-related setting on Instagram — on both my personal account and a few test accounts — and here's what actually matters. These are the settings I think everyone should check right now.

Activity Status — Turn This Off First

Photo by camilo jimenez on Unsplash

This is the one I'd change before anything else. It's under Settings → Privacy → Activity Status.

When Activity Status is turned on — which it is by default — anyone who follows you (and anyone you've DMed) can see "Active now" or "Active 23m ago" next to your name in DMs. It's the little green dot you've probably noticed on other people's profiles.

Why does this matter? Because it tells people exactly when you're on Instagram. Your boss can see you're scrolling at 2 AM. Your ex knows you're online right now. That person who DMed you three days ago can see you've been active but haven't responded. It creates pressure to reply and gives away patterns about your daily routine.

Turning it off is simple: go to Settings and privacy → Messages and story replies → Show activity status → Toggle it off.

There's a tradeoff, though. When you turn off your own activity status, you also lose the ability to see other people's activity status. Instagram makes it reciprocal — their privacy help documentation confirms this. Personally, I'm fine with that trade. I don't need to know when my friends are online, and I definitely don't need them monitoring me.

I tested this with two accounts in March 2026. Turned off Activity Status on one, then checked from the other. The green dot and the "Active now" indicator both disappeared immediately. The person with the setting off looked like they hadn't been on Instagram at all, even though they were actively browsing. That's the level of invisibility you get.

Story Controls — More Options Than You'd Think

Instagram gives you surprisingly granular control over stories. Most of it lives under Settings → Privacy → Story.

**Who can reply to your story:** You've got three options — "Everyone," "People you follow," or "Off." I keep mine on "People you follow" because I got tired of random accounts replying to stories with spam or weird comments. You can also set this per-story when you're about to post, but the default setting saves you from having to think about it every time.

**Hide story from specific people:** I wrote a whole separate post about this — how to hide your story from someone without blocking them. It's one of Instagram's most useful and most underused features. You can hide your stories from specific followers while keeping everything else about the relationship intact. No notifications, no drama.

**Allow sharing to messages:** When this is on, people can forward your story to someone else via DM. If you post something personal and don't want it forwarded around, turn this off. I've seen stories get screenshot and forwarded to group chats enough times to know this setting matters.

**Allow sharing to Threads:** If you're also on Meta's Threads app, this controls whether your Instagram stories can be reshared there. Given that Threads is a more public platform with a different audience, I'd think carefully before leaving this enabled.

Each of these settings is small on its own, but together they define how much control you have over your stories versus how much you're leaving to chance.

Account Privacy — Public vs Private and What Each Really Means

The big one. The toggle that Instagram makes binary but that has more implications than most people realize.

**Public account:** Anyone on the internet can see your posts, stories, reels, and highlights. Not just Instagram users — anyone with a web browser. Your content is indexable by Google. Third-party tools can access it. People who don't even have Instagram can view your stuff. That's just the reality of a public account.

Tools like PeekStories exist specifically because public accounts have their content accessible to anyone. If you're public, someone can view your stories without you ever knowing they were there. If you've ever wondered how anonymous story viewers work — that's how. Public content is public. The tools just make it easier to access without logging in.

**Private account:** Only approved followers can see your content. Your posts don't show up in Explore or in Google search. Third-party tools can't access your stories or posts. But your profile picture, bio, and follower/following counts are still publicly visible.

Here's the thing most people don't think about: going private has real costs if you're trying to grow your account. You won't appear in Explore. Your reels won't get distribution to non-followers. You can't get new followers organically through content discovery. It's a genuine tradeoff between privacy and reach.

My take: if you're using Instagram for personal stuff and don't care about growth, go private. If you're a creator, business, or building any kind of audience, staying public is necessary — but you need to compensate with the other privacy settings I'm covering in this post.

Message Controls — DMs Are a Privacy Minefield

Photo by Karsten Winegeart on Unsplash

Instagram's messaging defaults are pretty aggressive about giving everyone access to you. Here's what you should look at.

**Message requests from strangers:** By default, anyone can send you a message request — even people who don't follow you. Under Settings → Privacy → Messages, you can restrict who can send you message requests. Options include "People on Instagram you follow," "People on Instagram," or everyone including Facebook contacts. I keep mine restricted to people I follow because message requests from strangers are spam 95% of the time.

**Read receipts:** Instagram shows read receipts ("Seen") by default in DMs. As of late 2025, Instagram added an option to turn these off. Go to Settings → Privacy → Messages → Show read receipts. Turning this off means people won't see when you've read their message — big deal for managing social pressure. I wrote a full breakdown of all the tricks for reading DMs without the sender knowing if you want the complete picture.

**Group chat adds:** Anyone who follows you can add you to group chats by default. Under Messages settings, you can change this so only people you follow back can add you to groups. I changed this after getting added to three promotional group chats in one week by accounts I didn't know.

**Video and audio calls:** Instagram lets people call you directly through DMs. You can restrict who can call you in the same Messages settings area. Unless you actively use Instagram for calls (most people don't), consider limiting this to close contacts only.

Each of these is a small leak in your privacy. Individually they seem minor, but stacked up they give a lot of strangers a lot of access to your attention.

Data Sharing — What Meta Collects Behind the Scenes

This one's less about what other users can see and more about what Instagram itself is tracking. Spoiler: it's a lot.

Instagram — like everything Meta owns — collects data about your activity, your interests, your location, your device, and your browsing patterns. This data gets used for ad targeting and content recommendations. You can see a summary of what Meta has on you at your Account Center under "Your information and permissions."

There are a few things you can actually control:

**Off-Instagram activity:** Under Accounts Center → Your information and permissions → Your activity off Meta technologies, you can see which external websites and apps have sent your activity data to Meta. You can clear this history and disconnect future tracking. I cleared mine and was genuinely surprised to see how many random shopping sites had been feeding my browsing data to Instagram.

**Ad personalization:** Under Ad preferences, you can limit ad targeting based on partner data. This doesn't eliminate ads, but it reduces how precisely targeted they are. Less "we know you googled this exact product" and more "generic ad for something in your age demographic."

**Download your data:** Under Your activity → Download your information, you can request a full export of everything Instagram has stored about you. Messages, search history, login locations, ad interactions — all of it. I'd recommend doing this at least once just to see the scope. It's eye-opening.

Meta's Privacy Policy documents the full scope of what they collect, though it's dense reading. For a more practical take on how Instagram and Meta track your browsing behavior even when you're not actively on the app, I covered that in a separate post — including what VPNs actually protect and what they don't.

What Privacy Settings Can't Protect You From

Here's the honest truth that Instagram's settings page doesn't tell you: no combination of privacy settings makes you fully invisible on Instagram. If your account is public, your content is accessible to the entire internet.

The hide story feature? Great for keeping specific followers from seeing your stories. But it doesn't prevent someone from viewing your public stories through a third-party tool without any Instagram account. Activity status toggle? Excellent for hiding your online presence. But your post timing, story frequency, and comment activity still tell anyone paying attention roughly when you're active.

Going fully private is the closest thing to actual privacy, but even then your profile picture, bio, username, and follower count are visible to everyone. And anyone who follows you from before going private still has full access.

That's why I always tell people: Instagram privacy settings are about managing specific risks, not achieving total invisibility. Pick the risks that matter most to you and address those.

And on the flip side — if you want to view public Instagram content without leaving any trace yourself, that's what tools like PeekStories are designed for. No login, no account, no record of you ever being there. It doesn't require any special settings or hacks — it's just how public content works when you access it from outside the Instagram app.

Five minutes going through the settings I've listed here will put you in a much better position than the default state Instagram starts you with. Most of these are one-time changes — set them once and you're done.