Dealing with a Hacked Instagram Account: Here's My Advice for You

 Mobile Security Emergency: What to Do in Case of an Incident

Dealing with a Hacked Instagram Account: Here's My Advice for You

Managing personal technology security can be quite challenging, not due to the complexity of setting up security measures, but because of the multitude of touchpoints and potential vulnerabilities we face. Keeping track of security for numerous social media, banking, app, computer, and work app accounts can become overwhelming. However, ignoring threats and alerts can lead to serious risks. I believe in leading by example, which is why I'm sharing this brief technology anecdote to highlight the importance of proactive security measures.

It all began when a colleague casually inquired if I had sent him direct messages on Instagram. I replied in the negative, and he suggested the possibility of a hack. Intrigued, I checked my Instagram account but found no evidence of unusual activity or unauthorized log-ins from new devices or locations. At this point, I hadn't received any details about such log-ins either.

I requested my colleague to share the content of the suspicious DM, but due to work commitments, neither of us pursued the matter further. I was primarily interested in determining if someone was impersonating me through a different account.

A Second Warning

Several hours later, a friend informed me that my Instagram account had likely been compromised because she had received a crypto pitch from me (trust me, I am not the type to send crypto pitches). I requested a screenshot to confirm the message's authenticity, but I still wondered if it was a fake "Lance Ulanoff" Instagram account. However, it was highly improbable that two different contacts had made the same mistake, especially on the same day.

Despite my attempts to stay calm, I couldn't ignore this warning any longer. There was a possibility that someone had unauthorized access to my account, along with my ID and password, using it discreetly to send and quickly delete DMs to my friends, family, coworkers, and acquaintances.

Here's where the advice comes in:

Taking Action

I made the decision to take immediate security measures and delved into my Instagram settings to accomplish two crucial tasks.

First, I changed my password. This step requires knowledge of your existing password (which not everyone has) or having it stored in a reliable password manager (as I do). I followed the recommended guidelines to create a strong password, consisting of at least six characters, combining letters, numbers, and special characters. I took pride in the strength of my newly crafted password. During this process, ensure that you store the new password securely in a password manager or another highly secure method for easy retrieval.

Second, I implemented two-factor authentication. This additional layer of security significantly reduces the chances of a similar incident occurring in the future. You can choose between receiving a text message code (sent to your mobile device) or using a third-party authentication app like Google Authenticator, which generates a code to be entered on Instagram for account access. The advantage here is that you only need to use this when logging back into the app, such as when you're logged out. Even better, modifying your security profile can boot unauthorized users off your account.

That's precisely what I did, and I wish I had implemented two-factor authentication sooner. I already had it in place for Facebook and most of my other critical and personal apps. It seems I had simply procrastinated on setting it up for Instagram.

The key takeaway here is not to ignore warning signs. If you suspect any possibility of a hack or breach, take immediate action. Don't let the inconvenience of changing a cherished password deter you. Most security experts recommend changing passwords regularly, at least every six months.

Let my experience serve as a valuable lesson for you, and you're welcome.