I cannot get my Instagram two factor code

The protection you turned on is now keeping you out, which is exactly what it is designed to do to anybody who cannot receive the code. Nearly always the cause is an old mobile number or an authentication app that lived on a phone you have replaced. There is a way through, and afterwards there is a five minute job that stops it happening again.

Last checked: 15 August 2026. Every official Facebook, Instagram and Australian government link on this page was opened and confirmed working on that date. If you find one that no longer works, please tell us and we will fix it, because a dead link on a page like this is worse than no page at all.

There is no Instagram phone number, and nobody to ring. Meta does not run a public telephone support line for personal accounts. So if you search for one and find a number, in a web result, in a comment, in a video description or in a message, it belongs to somebody who wants your money or your account. There is no exception to this. Everything real happens on the official web pages linked on this page, and none of it costs anything.

Look for your backup codes first

When you set two factor authentication up, Instagram gave you a set of backup codes and suggested you save them. Any one of them will get you in without the phone. Check a screenshot in your photos, a note on another device, a password manager, an email you sent yourself, or a piece of paper in a drawer.

People save these far more often than they remember doing it, so it is worth five minutes of looking before you go any further.

If the codes are gone

The official page for this situation:

Instagram: I cannot log in

https://help.instagram.com/374546259294234

The official route when a login code cannot reach you. Start it in the app on the phone you normally use.

Try this first, on the right device. Start the recovery on a phone, tablet or computer you have logged in from before, using the same internet connection you normally use at home. Facebook and Instagram recognise a device they have seen before, and they will often let you straight back in with far fewer questions. Facebook says this itself at the start of its recovery form: if you can, begin on the device you usually use. Doing the whole thing on a borrowed computer is the single most common reason a recovery stalls.

Instagram explains how the whole system works here: securing your Meta account with two factor authentication.

If it is just an old phone number

This is the usual cause. The number on the account belongs to a phone or a plan you no longer have, so the text goes nowhere. If that number moved with you to your current phone, try once more, because it may simply work now. If it is truly gone, you are into the identity check route, which is slower but real.

Once you are back in, five minutes of housekeeping

  1. Update the mobile number on the account to the phone you use now.
  2. Generate a fresh set of backup codes and keep them somewhere that is not your phone. Written on paper in a drawer is fine and survives a lost handset.
  3. If you use an authentication app, set it up on a second device too, or check that the app backs itself up, so a broken phone is not a locked account.
  4. Leave two factor authentication switched on. Being locked out is fixable. Being taken over often is not.

One warning that matters especially now

While you are waiting for a code, you are exactly the person a code scam is designed for. Nobody legitimate will ever ask you to read out a code, forward one, or send one to a friend who says they are locked out. That code is the last thing protecting the account, and asking for it is the entire trick.

  • Anyone offering a phone number. There is no Meta support line. A number is the clearest single sign you are being scammed.
  • Paid recovery agents. Services that promise to get your account back for a fee. They have no access Meta does not give you for free, and the usual outcome is that you pay and nothing happens.
  • Anyone who messages you offering to help after you post that you have been hacked, especially on Instagram. Watching for those posts is exactly how they find people.
  • Anyone asking for an upfront fee, a gift card, a voucher or a cryptocurrency payment. No legitimate service is paid this way.
  • Anyone asking for your password or your two factor code. No real Meta process ever asks a person for these. Sharing the code is how the second theft happens.
  • Anyone asking to remote control your computer to fix it for you, unless it is somebody you already know and trust.
  • A friend asking you to receive a code for them. That friend has already been taken over, and the code is for your account.

Related pages on this site

Frequently asked questions

I lost the phone with my Instagram authentication app. What now?

Use one of the backup codes you were given when you turned two factor authentication on, which is precisely what they exist for. If you cannot find them, start Instagram's cannot log in route from a device you have used for Instagram before, because a recognised device makes it far more likely you will be offered an alternative way through.

The code goes to a phone number I no longer have.

That is the most common cause of this. If the number moved with you to your current phone, try once more, as it may work. If the number is genuinely gone, you need Instagram's identity check route instead, which takes longer but is the real way back when there is nowhere left to send a code. Start it from the app if you can.

Where would my Instagram backup codes be saved?

Most often as a screenshot in your photo library, a note on a phone or tablet, an entry in a password manager, or an email you sent to yourself. Some people printed them. It is worth five minutes of searching before you commit to the slower route, because a single code ends the problem immediately.Once you are back in, generate a fresh set and keep them somewhere that is not the phone itself, so a lost handset is never a locked account.

Someone says they are locked out and needs me to receive their code.

Do not do it, under any circumstances. Their account has already been taken over and the person messaging you is not your friend. The code being sent is for your account, not theirs, so passing it on hands yours over as well. Ring the person on a number you already have and tell them what has happened.No genuine recovery process has ever required a second person to receive a code on somebody else's behalf.