Connected Apps That Can Take Over Instagram: How to Remove Them

Here's how to audit connected apps.

Last checked: 29 October 2026 against the sources listed at the end of this guide.

Keep a dated note of every screen you see, including the exact wording shown, before you press continue on any form. Keep a dated note of every screen you see, including the exact wording shown, before you press continue on any form. Keep a dated note of every screen you see, including the exact wording shown, before you press continue on any form.

#Which apps are risky?

There are two very different ways an app can connect to Instagram. The safe way is through Meta's official login and permissions, where you approve what the app can see or do and can remove that access at any time. Business tools such as schedulers and inbox apps often work this way. The risky way is any app that asks you to type your Instagram password into it. That app then logs in as you, often from servers in other countries, and can do anything you can, including changing your email and password.

Meta's Spam policy prohibits buying or exchanging likes, follows and other engagement. Apps that automatically like, follow or comment for you break that rule, and the activity they create can lead Instagram to limit or disable the account. Follower-tracker apps that promise to show who viewed your profile are another warning sign. Instagram does not share that information, so these apps cannot do what they claim, and many exist mainly to collect passwords.

#How do I remove them?

1. Open Settings and follow Instagram's steps to review apps and websites.
2. Check every app listed.
3. Remove unknown apps.
4. Change your password.
5. Turn on two-factor authentication.

Related guides: Instagram Authenticator Code Not Working or "Invalid": How Do I Avoid Getting Locked Out?, Instagram "Like and Earn" Task Scam: What If I Already Paid?.

Removing an app's access from settings stops it using the official connection. It does not stop an app that has your password. That is why changing your password afterwards matters: once the password changes, any app that saved it is logged out. Instagram's Secure your Instagram account page recommends a strong password used only for Instagram, and two-factor authentication on top.

#What else should I check?

• Accounts Center, Password and security, Where you're logged in: log out devices and locations you do not recognise.
• Accounts Center, Personal details: make sure the email and phone are yours.
• Your email inbox: look for messages from security@mail.instagram.com about changes you did not make.
• Your posts, comments and follows: delete anything an app posted that you do not want.
• Linked Facebook accounts in Accounts Center: remove any account that is not yours.

#What common mistakes should I avoid?

• Giving apps your password.
• Keeping unused apps connected.
• Not changing your password after.
• Using follower-tracker apps.

If an app has already taken over your account and changed the login details, follow Instagram's If you think your Instagram profile has been hacked page. It explains how to use the email from security@mail.instagram.com to undo a change, and the other checks Instagram may offer if that email is not available.

#How do I keep the account safe while I sort this out?

• Never share a login code, password or backup code with anyone, including people who say they work for Meta, the police or a recovery service.
• Make sure the email address and phone number on the account are ones you still control, and remove any you do not recognise.
• Turn on two-factor authentication where the platform offers it, ideally with an authenticator app, and keep your backup codes somewhere offline.
• Log in only from the official app or by typing the address yourself, not from links in messages, comments or ads.
• Keep screenshots of every notice, email and step you take, with dates, in case you need them for a review or a report.
• Make one careful attempt at each official step rather than many rushed ones, because repeated failed attempts can trigger extra checks.

#When It Is Safer to Get Expert Help

Ask for help before you appeal if the account matters to your income, your business or your memories, if you have already had one appeal rejected, or if you cannot tell whether the problem is a bug, a restriction or a hack. That is where most avoidable losses happen.

AwareXone is independent and not affiliated with Meta, Instagram, Facebook, WhatsApp or Threads. Recovery work is best-effort and the platform makes the final decision.

• An app changed your email, phone or password.
• Your account was limited or disabled after using a growth app.
• You gave your password to an agency or freelancer and cannot reach them.
• You see logins you cannot log out.