Backup codes are single-use spares for two-factor authentication: when the usual login code can't reach you because of signal or delivery trouble or a missing phone, one of them gets you through. They're kept in the two-factor section of Accounts Center (or Meta Account settings), under Additional methods. One detail decides everything: Instagram only displays them, or makes new ones, while you're signed in. Save them before you need them. Already locked out without them? A device that's still signed in or trusted, your second two-factor method, or a support request with an identity check remain. Anyone selling "generated" backup codes is lying.
Why the codes exist
Turning on two-factor authentication means every sign-in from an unrecognised phone, tablet or browser needs a second code, usually from an authenticator app, an SMS or WhatsApp. If that second code can't get to you, the backup codes step in. Instagram describes two such moments: when connectivity or delivery problems stop a code being sent, and when you've lost your phone or email and therefore can't receive codes.
Codes are issued per profile. If you manage a business account and a personal one, each has a separate set, and you choose which account you're looking at before the list appears.
Where the list lives
Start from your profile picture in the app (bottom right), then the menu at the top right; on desktop, More at the bottom left, then Settings. From there: Accounts Center › Password and security › Two-factor authentication › pick the account › Additional methods › Backup codes.
Keep at least one copy away from the phone that receives your login codes: a password manager, a sheet of paper in a drawer, an encrypted note you can open elsewhere. A screenshot on the same phone disappears with it. Some accounts already show Meta Account settings where Accounts Center used to be; the path inside is similar.
Signing in with a code
On the screen that asks for your two-factor code, enter a backup code in its place. Where the screen offers alternative methods, choose the one for backup codes. Copy the code from your latest saved list rather than typing it from memory.
After you're in, close the gap that caused the problem. For a missing phone, point two-factor at a new number or authenticator and look through your active sessions. If the trouble looks like an intruder rather than bad luck, follow the hacked-account order instead.
Getting a fresh set
On the same Backup codes screen, choose Get new codes. Instagram says the previous codes stop working and new ones replace them.
Good moments to do it: once you've used a few, when a device holding a copy is lost or stolen, and whenever you suspect someone saw your account or your saved list.
Why a code might be rejected
Instagram doesn't list reasons, so check these four things:
| Question | What to look for |
|---|---|
| Is your copy current? | Requesting new codes kills the old ones, and someone with access to your account could have requested them |
| Is it this account's list? | Every profile has its own codes |
| Is it a backup code at all? | App, SMS and email codes are separate kinds and only work where Instagram asks for them |
| Was it copied exactly? | Paste or read from the saved list |
If none of your codes pass, treat yourself as having none.
Locked out without codes
| What's still available | What it gets you |
|---|---|
| A phone or laptop where you're still signed in | Open the same settings there, make new codes or change the two-factor method |
| A device you once marked as trusted | Instagram doesn't ask it for a security code |
| The authenticator on another device | That method can be installed on several devices at once |
| Your number moved to a new SIM | Text codes are tied to the number, not the old phone |
| Nothing at all | Ask Instagram for support from a phone; expect a video selfie or questions about your sign-up email or number and device |
More on each case: a lost two-factor phone and no access to your email or phone.
Common questions
Where do I find Instagram backup codes?
Two-factor authentication in Accounts Center or Meta Account settings, then Additional methods, then Backup codes.
Can I view them from the login screen?
No. Instagram shows and refreshes them only while you're signed in.
Do old codes still work after I request new ones?
No. A new set replaces the old one completely.
Can a website create backup codes for my account?
No. Only Instagram creates them, inside your signed-in account; such sites are scams.
What if I never saved any?
Use a device that's still signed in or trusted, your other two-factor method, or a support request from a phone with an identity check.
Stuck on the two-factor screen?
Tell us which sign-in methods you still have. A free first look points you to the official route that's left. Your password and codes stay with you.
Sources
- How you can use a backup code on Instagram (Instagram Help Center) help.instagram.com
- Securing your Meta Account with two-factor authentication (Instagram Help Center) help.instagram.com
- Use an authentication app for two-factor authentication on Instagram (Instagram Help Center) help.instagram.com
- Turn two-factor authentication for multiple devices on or off (Instagram Help Center) help.instagram.com
- If you think your Instagram profile has been hacked (Instagram Help Center) help.instagram.com