Account safety
How to recognize an unsafe Instagram download site
A website that handles a public Instagram link should not need your password, session cookie, two-factor code, or recovery email password. Leave when a tool asks for credentials that can unlock the account.
Treat session data like a password
A session cookie can represent an already authenticated browser. Sharing it may let someone act as the signed-in account without asking for the password again. Two-factor codes and backup codes are also authentication secrets, not download requirements.
Do not paste browser developer-tool output into a website or send a cookie file to support. If instructions ask you to disable security controls or run unfamiliar code in the browser console, stop.
Question unnecessary software installs
A browser extension or desktop package has a larger permission surface than a simple web page. Read the requested permissions, publisher identity, update history, and removal steps. An extension that can read and change data on every website is a poor trade for a one-time media backup.
Download buttons can also be advertisements made to look like the site's action. Check the destination before opening a file and reject executables when you expected a photo, video, or archive.
| Request | Safer response |
|---|---|
| Instagram password or two-factor code | Do not provide it |
| Session cookie or browser-console script | Close the site |
| Extension with broad browsing access | Use an official export or local original instead |
| Unexpected installer | Delete it without opening |
Act quickly after sharing a secret
If you entered a password on a suspicious site, change it from Instagram or Accounts Center, review active sessions, and confirm recovery details. Revoke unknown connected apps and preserve screenshots of the incident if business or client information may be affected.
When a session cookie or backup code was exposed, sign out other sessions and regenerate the relevant credentials where Instagram provides that option.
Sources checked
Menu names can change as Instagram updates its apps.