Lost Your Phone? How to Log In to Instagram With Backup Codes

Your phone is gone — lost, stolen, or dead — and it held your authenticator app, the only thing that produced your Instagram login codes. This is the exact emergency that backup codes were invented for. When you turned on two-factor authentication, Instagram gave you a set of one-time backup codes. If any of those codes still exist — in a screenshot, a note, an email to yourself, a drawer — you can log in right now, from any device, without your phone.

This guide shows you how to find and use those codes, and what to do immediately after you are back inside your account.

Quick Answer

To use an Instagram backup code, log in with your username and password on any device, and on the two-factor code screen choose “Try another way” or the backup code option, then enter one of your saved eight-digit backup codes. Each code works once. After logging in, secure the account: change the password if the phone was stolen, remove the lost phone’s sessions, and generate a fresh set of backup codes.

Where Your Backup Codes Might Be Hiding

Most people saved their codes without thinking much about it. Before anything else, hunt through the usual places:

• Screenshots: Search your photo gallery on any synced service — Google Photos, iCloud, OneDrive — for the screenshot you took when enabling 2FA.
• Notes apps: Check Apple Notes, Google Keep, Samsung Notes, and any “passwords” note.
• Password managers: If you use one, the codes may be stored in the Instagram entry’s notes field.
• Email: Some people emailed the codes to themselves. Search your inbox for “backup code” and “Instagram”.
• Paper: A printed copy in a desk drawer, wallet card, or with important documents.
• Another device’s browser: If you ever viewed the codes while logged in on a computer, they are only viewable live — but check whether you copied them into a document there.

Step by Step: Log In With a Backup Code

1. On any phone, tablet, or computer, open Instagram or instagram.com and enter your username and password.
2. When the two-factor authentication screen appears asking for a code from your app, look for “Try another way,” “Use backup code,” or a similar option — the wording varies slightly by version.
3. Select the backup code option.
4. Enter one eight-digit backup code exactly as saved, without spaces unless the original shows them.
5. Complete the login. That code is now used up and will never work again — cross it off your list.

Instagram describes backup codes as part of its two-factor authentication help documentation, including the fact that each code can be used only once.

Immediately After Logging In: Secure Everything

Getting in is only half the job, especially if the phone was stolen rather than misplaced.

1. Change your password if there is any chance someone else has the phone or could guess your old one.
2. Check active sessions: In Settings, Accounts Center, Password and security, review where your account is logged in and log out the lost phone’s session.
3. Regenerate backup codes: Go to the two-factor authentication settings and generate a new set. This instantly invalidates all old unused codes — including any still on the lost phone’s screenshots.
4. Set up 2FA on your new device: Enrol your new phone’s authenticator app with the fresh QR code.
5. Confirm your contact details: Make sure the email and phone number on the account are yours and current, so recovery stays possible.

If You Cannot Find Any Backup Codes

All is not lost. Try the other escape routes in order: the SMS or WhatsApp code option on the “Try another way” screen (these go to your number, which you can usually restore onto a new SIM quickly through your carrier), any device still logged in at home, or the identity verification recovery flow. Our guide on recovering Instagram when the authenticator app was deleted walks through each of those routes in detail. Getting your number restored by your carrier is often the fastest practical step, because SMS recovery then works immediately.

Protect the New Codes Properly This Time

Backup codes fail people in two ways: never saved, or saved in exactly the place that gets lost with the phone. Store the new set like spare house keys:

• Save them in a password manager — the strongest option, since it syncs safely across devices.
• Print a copy and keep it with important documents at home.
• Do not keep the only copy as a screenshot on the same phone the codes protect.
• Never share codes with anyone, including people claiming to be Instagram support. Instagram will never ask for a backup code outside the login screen.

For Stolen Phones: The First Hour Checklist

If the phone was stolen rather than lost at home, treat the first hour as damage control that goes beyond Instagram. Use another device to change the password of the email account tied to Instagram, because email access can reset almost everything else. Contact your carrier to suspend the SIM, which stops the thief receiving your SMS codes and protects every account that uses your number. Use your phone maker’s find-my-device service to lock the phone and display a contact number, and erase it remotely only after you have recovered the accounts you need — erasing is final.

Then work through your important accounts one by one, Instagram included, using backup codes and recovery flows while the trail is fresh. It is an unpleasant hour, but people who do it promptly almost always keep their accounts; people who wait often spend weeks untangling what a thief did in the meantime.

Common Mistakes to Avoid

• Trying codes you have already used: Each code is single-use. Keep your list updated by crossing off spent codes.
• Entering the code in the password field: Backup codes only work on the two-factor screen’s dedicated backup code option.
• Skipping the regeneration step: If your lost phone holds your screenshots, old codes are a standing invitation. Regenerating kills them all.
• Delaying after a theft: Every hour the lost phone keeps its sessions and codes is an hour of risk. Log in and lock down promptly.

Conclusion

Backup codes are the spare key Instagram gave you for exactly this emergency. Find a saved code, choose the backup code option at the two-factor screen, and you are back in within a minute — then spend five more minutes regenerating codes, removing the lost phone’s sessions, and setting up 2FA on your new device. That combination turns a crisis into a minor inconvenience.

Frequently Asked Questions

How many backup codes does Instagram give, and how long are they?

Instagram provides a set of backup codes, each eight digits long, when you set up two-factor authentication or regenerate them. Each code can be used exactly once, and generating a new set invalidates the previous set.

Can I use a backup code on a computer?

Yes. Backup codes work at the two-factor prompt on the app and on instagram.com in a browser. The login flow is the same: password first, then choose the backup code option.

What happens if I enter a wrong backup code?

Nothing destructive — the login simply fails. Check the digits carefully and try another code from your list if needed. Avoid many rapid failed attempts, which can temporarily lock login attempts.

My backup codes were on the lost phone. Is there any other way in?

Yes: restore your phone number with your carrier onto a new SIM and use SMS code delivery, use a device still logged in, or complete Instagram’s identity verification recovery. Backup codes are one route, not the only one.

Should I turn off two-factor after this scare?

No. Two-factor authentication is still the best protection against account theft. The lesson is not to remove it — it is to store the backup codes somewhere independent of your phone and keep them fresh.