---
title: "Instagram Login Alert You Don't Recognise? Here's What to Do"
description: "An Instagram alert about an unfamiliar login? Check the device, choose This Was Me or This Wasn't Me, and learn to tell real alerts from phishing."
url: https://getmyinstaback.com/blog/instagram-suspicious-login-attempt/
language: en
updated: 2026-10-27
publisher: GetMyInstaBack (https://getmyinstaback.com/)
---

# An Instagram login alert you don't recognise: the first five minutes

Published 27 October 2026 4 min read [By the GetMyInstaBack team](https://getmyinstaback.com/about/)

**In one minute:** A login alert means a device or browser new to Instagram just tried your account. With two-factor on, you see which device and roughly where, and can let it in or block it. Check the session list in Accounts Center: confirm it if it's yours, reject it and set a new password if not (other sessions then end). One alert doesn't mean the account is gone; an unexpected reset email is often just someone's typo. The alert emails themselves deserve suspicion, since fakes are a classic phishing lure.

## What triggered the alert

Instagram's name for these is **login requests**. Once [two-factor authentication](https://getmyinstaback.com/glossary/#two-factor) is on, any sign-in from hardware or a browser Instagram hasn't met triggers one, whether as a push alert, an Activity entry or an in-app banner. It names the device and its rough location, and you decide right there whether to let it through.

Unfamiliar to Instagram isn't the same as suspicious. New phones, fresh browsers and wiped cookies all trigger it. What counts is whether the device and place mean something to **you**.

## The first five minutes

1. **Don't click links in an alert email yet.** Open the Instagram app yourself.
2. **Find the session.** Accounts Center › Password and security › **Where you're logged in** (on desktop via More › Settings). Older app versions keep it under Security › **Login activity**.
3. **Familiar?** Tap **This Was Me** and confirm.
4. **Unfamiliar?** Tap **This Wasn't Me**; Instagram then walks you through a password reset.
5. **Buttons missing?** They only appear after a login from something Instagram didn't recognise. Any listed session can still be logged out by hand.

## Answering a login request

Opening the alert shows device and location. **Approve** means yes, that was me; **Deny** means no, and Instagram follows up with a password reset so the old password stops working for whoever had it.

The feature lives in the two-factor settings under additional methods (**Login requests**), and it relies on Instagram being allowed to send you push notifications.

## An unrequested password reset email

A reset email out of the blue feels alarming, yet Instagram points out it's often innocent: another user fat-fingered their own email or handle and typed yours. Getting in still requires your password, or a click on the link inside that very email.

So don't click. Uneasy anyway? Open the app directly, choose a new password and add two-factor authentication.

## Telling real alerts from fake ones

Fake "suspicious login" emails work because they make people hurry. Three checks before you touch anything:

- **The sender's domain.** It has to be one of Instagram's official sending domains; the list is in [error messages](https://getmyinstaback.com/blog/instagram-error-messages/).
- **Recent emails.** Settings keeps two weeks of real Instagram mail. Not listed there? Not from Instagram.
- **The channel.** Security never comes up in Direct.

More examples: [fake Instagram emails and DMs](https://getmyinstaback.com/blog/fake-instagram-emails-and-messages/).

## Quick reference

| What you see | Most likely | Your move |
|---|---|---|
| Alert for the phone you set up this morning | Your own new device | Approve / This Was Me |
| Alert for a device that isn't yours | Your password is probably known to someone | Deny, then a new password |
| Reset email you never requested | Likely a stranger's typo | Leave the link; optionally update your password in-app |
| Alert email that Recent emails doesn't show | Phishing | Delete without clicking |
| Sudden lockout | Possible takeover | instagram.com/hacked |

## It wasn't you: what now

A stranger's login usually means your password is out there. Instagram's examples: reusing it on a website that later got breached, or connecting the account to an outside app it never approved. Act while you're still in:

- new password (it ends every other session);
- two-factor authentication on;
- your own email and phone in settings, nobody else's;
- unknown linked accounts removed from [Accounts Center](https://getmyinstaback.com/glossary/#accounts-center);
- shady third-party apps disconnected.

Posts or messages you didn't send? See [Instagram posting things you didn't](https://getmyinstaback.com/blog/instagram-posting-without-you/). Email already changed? [Reversing an email change](https://getmyinstaback.com/blog/instagram-email-changed-by-hacker/). Locked out completely? [Hacked account](https://getmyinstaback.com/guides/instagram-account-hacked/).

## Common questions

### Is a login alert proof that I've been hacked?

No. New phones and browsers trigger alerts too. It's a warning, not a verdict: if the device or place isn't familiar, reject it and change the password.

### This Was Me or This Wasn't Me: how do I decide?

Only confirm sessions you can place, a phone you own, a city you were in. Anything else gets This Wasn't Me, which leads straight into a password reset.

### Why do my own logins set off alerts?

Instagram judges devices, not people: new hardware, another browser or wiped cookies all look new. Confirming them is enough. A device you've never owned is a different story; change the password.

### How do I know an alert email is real?

Two checks: an official Instagram sending domain, and a matching entry in Settings › Recent emails. Fail either and it's phishing.

## Not sure whether it was you?

Screenshot the alert or your session list and send it to us. We'll say for free whether action is needed. Your password and codes stay yours.

[Open a free case](https://getmyinstaback.com/#start)

[Chat on WhatsApp](https://wa.me/447308693453?text=Hi%2C%20I%20found%20you%20on%20getmyinstaback.com%20and%20I'd%20like%20a%20free%20analysis%20of%20my%20Instagram%20account.)

## Key terms in this article

- [Login request](https://getmyinstaback.com/glossary/#login-request)
- [Two-factor authentication (2FA)](https://getmyinstaback.com/glossary/#two-factor)
- [Accounts Center](https://getmyinstaback.com/glossary/#accounts-center)
- [Security email](https://getmyinstaback.com/glossary/#security-email)

## Sources

1. [Turn login requests on or off on Instagram (Instagram Help Center)](https://help.instagram.com/154776793259282/) help.instagram.com
2. [View your recent Instagram login activity (Instagram Help Center)](https://help.instagram.com/2761108904184084/) help.instagram.com
3. [Why you received an Instagram password reset email that you didn't request (Instagram Help Center)](https://help.instagram.com/231141655544451/) help.instagram.com
4. [Review recent emails sent from Instagram (Instagram Help Center)](https://help.instagram.com/760602221058803/) help.instagram.com
5. [Why Instagram tells you your account is at risk (Instagram Help Center)](https://help.instagram.com/273359857992105/) help.instagram.com
6. [If you think your Instagram profile has been hacked (Instagram Help Center)](https://help.instagram.com/149494825257596) help.instagram.com

## Related guides

- [Hacked Instagram account: what to do, in the right order](https://getmyinstaback.com/guides/instagram-account-hacked/)
- [Instagram recovery scams: how to tell a fake "recovery expert" from real help](https://getmyinstaback.com/guides/instagram-recovery-scams/)

## From the blog

- [Signing out of Instagram everywhere, and checking for sessions that aren't yours](https://getmyinstaback.com/blog/log-out-of-instagram-on-all-devices/)
- [A hacker changed the email on your Instagram: how to reverse it and get back in](https://getmyinstaback.com/blog/instagram-email-changed-by-hacker/)
- [Passkeys on Instagram: setting one up, signing in with it, and what to do when it fails](https://getmyinstaback.com/blog/instagram-passkey/)
- [Is that message really from Instagram? A 30-second check for fake emails and DMs](https://getmyinstaback.com/blog/fake-instagram-emails-and-messages/)

---

Other languages: [de](https://getmyinstaback.com/de/blog/instagram-verdaechtiger-anmeldeversuch/) · [fr](https://getmyinstaback.com/fr/blog/instagram-tentative-de-connexion-suspecte/) · [es](https://getmyinstaback.com/es/blog/instagram-intento-inicio-sesion-sospechoso/) · [it](https://getmyinstaback.com/it/blog/instagram-tentativo-di-accesso-sospetto/) · [pt](https://getmyinstaback.com/pt/blog/instagram-tentativa-de-inicio-de-sessao-suspeita/) · [nl](https://getmyinstaback.com/nl/blog/instagram-verdachte-inlogpoging/) · [pl](https://getmyinstaback.com/pl/blog/instagram-podejrzana-proba-logowania/) · [sv](https://getmyinstaback.com/sv/blog/instagram-misstankt-inloggningsforsok/) · [da](https://getmyinstaback.com/da/blog/instagram-mistaenkeligt-loginforsog/) · [nb](https://getmyinstaback.com/nb/blog/instagram-mistenkelig-paloggingsforsok/) · [fi](https://getmyinstaback.com/fi/blog/instagram-epailyttava-kirjautumisyritys/) · [cs](https://getmyinstaback.com/cs/blog/instagram-podezrely-pokus-o-prihlaseni/) · [sk](https://getmyinstaback.com/sk/blog/instagram-podozrivy-pokus-o-prihlasenie/) · [hu](https://getmyinstaback.com/hu/blog/instagram-gyanus-bejelentkezesi-kiserlet/) · [ro](https://getmyinstaback.com/ro/blog/instagram-incercare-de-conectare-suspecta/) · [bg](https://getmyinstaback.com/bg/blog/instagram-podozritelen-opit-za-vhod/) · [el](https://getmyinstaback.com/el/blog/instagram-ypopti-prospatheia-syndesis/) · [hr](https://getmyinstaback.com/hr/blog/instagram-sumnjiv-pokusaj-prijave/) · [sl](https://getmyinstaback.com/sl/blog/instagram-sumljiv-poskus-prijave/) · [lt](https://getmyinstaback.com/lt/blog/instagram-itartinas-bandymas-prisijungti/) · [lv](https://getmyinstaback.com/lv/blog/instagram-aizdomigs-pieteiksanas-meginajums/) · [et](https://getmyinstaback.com/et/blog/instagram-kahtlane-sisselogimiskatse/) · [tr](https://getmyinstaback.com/tr/blog/instagram-supheli-giris-denemesi/) · [uk](https://getmyinstaback.com/uk/blog/instagram-pidozrila-sproba-vkhodu/)

HTML version: https://getmyinstaback.com/blog/instagram-suspicious-login-attempt/