Instagram's code goes to the number the account confirmed

Instagram's rule about the number

• Instagram Help Center, on SMS two-factor

  “Keep in mind that you must have a confirmed telephone number for your Instagram account to use text messages (SMS) two-factor authentication. When you enter a telephone number to turn on two-factor authentication, it becomes the confirmed number for your account.”

  https://help.instagram.com/843785199163974

Two consequences fall out of that second sentence. The number you use to switch on two-factor is not a side setting — it becomes the account's number. And the code arrives on every unfamiliar sign-in, not just the first: “If you choose to use text message (SMS), you'll be sent a text message (SMS) with a special 6-digit security code each time someone tries logging into your Instagram account from a device we don't recognize” (Instagram).

For a business that matters more than it sounds. A team that logs in from a different laptop, a scheduling tool, a new phone or a café's network is an unfamiliar device each time, and the account will keep asking whoever holds the number.

The three methods, in Instagram's order

• Instagram Help Center, on the recommended method

  “Authentication app: (recommended): Download an authentication app, such as Duo Mobile or Google Authenticator to get login codes.”

  https://help.instagram.com/566810106808145

The other two are “Text message: We'll send a login code to your mobile number”, and WhatsApp, which Instagram gates behind SMS: “Turn on the text message security method first. Then, you can turn on the WhatsApp security method to get login codes from WhatsApp.” Instagram adds that you need at least one of them, and that backup codes exist for the day none of them work: “If you lose access to your phone or email address and are unable to get login codes, you can use a backup code to log in” (Instagram).

Take the recommendation seriously. For an account a company depends on, a shared authenticator seed plus saved backup codes beats a phone number, and the number should be the route back in rather than the front door. The line still earns its place as the number Instagram confirms, and as the thing that keeps working when a person changes.

What Instagram publishes about number type

Nothing. Across the two-factor, SMS and change-number help pages, Instagram never mentions VoIP, virtual numbers or landlines. It says mobile number and stops. So there is no rule to satisfy and none to quote, and we will not invent one: a Cleat line is a real US mobile line rather than an internet number, and that is a fact about the line, not a promise about Instagram. How line type decides what a service accepts explains the check that runs whether or not a company documents it.

Changing the number without losing the account

Instagram's own steps, from Accounts Center (Instagram):

1. 01Open Settings, then Accounts Center, then Password and security.
2. 02Choose Two-factor authentication, then the account you're changing.
3. 03With two-factor already on, select SMS or WhatsApp, then Use different phone number.
4. 04Enter the new number and confirm the 6-digit code Instagram texts to it.
5. 05Save the new backup codes it shows you — the old ones are replaced.

Instagram is explicit about that last step: “You'll see a list of backup codes, be sure to save these codes so you can access your account if you lose your device or have trouble using another security method.” Do the change while the old number still receives texts, and put the backup codes somewhere the company keeps them, not the person.

Where a Cleat line fits

On a business account the company owns, so the number outlives the social manager who set it up; and on an agency engagement where the client keeps the line and invites you to the inbox, so your access ends when they remove you rather than when someone remembers to. A Cleat line is a real US mobile number, not VoIP, held by one identity-verified person, readable by a team, at $24.99 a month. Cleat for teams is the model in full; for the ad side of Meta, Meta Business Suite covers which check belongs to the business and which belongs to a person.

When Cleat is the wrong answer here

• Extra accounts. One person, one line, one account they are entitled to hold.
• A creator's personal account with a phone in their pocket. They already have a better answer, and an authenticator app is better still.
• Getting back into a disabled account. A new number is not a new case. Instagram's route back runs through its own review, not through a phone.
• Sending anything. The line receives texts and transcripts of incoming calls. It cannot reply, dial or reach 911.

Keep reading

Facebook · WhatsApp · Meta Business Suite · Every service in this section