Instagram to Introduce Non-SMS Two-Factor Authentication to Prevent SIM Hacking - MacRumors
Skip to Content

Instagram to Introduce Non-SMS Two-Factor Authentication to Prevent SIM Hacking

by

Instagram is planning to introduce a new two-factor authentication method that will not require a user's phone number and will instead work with authentication apps like Google Authenticator, reports TechCrunch.

Authentication apps are a safer two-factor option than the phone number method, which can be bypassed through SIM hacking, as outlined earlier today by VICE's Motherboard.

instagramtwofactortc

Image via TechCrunch

SIM hacking involves hijacking a person's phone number by manipulating cellular service support staff and claiming a SIM card has been lost.

Creating a new SIM associated with the phone number allows it to be stolen, and if that phone number is associated with a social networking account, as it would be with Instagram's current two-factor authentication method, the results can be devastating.

In Motherboard's article, for example, SIM hacking is used to steal Instagram accounts, which can be lucrative when highly desired usernames are poached.

Instagram is especially vulnerable to this kind of attack because right now, when you turn on Instagram's two-factor authentication, account codes and password reset requests are sent via your phone number.

Instagram has already been testing the new two-factor authentication method, with screenshots and details baked into the code for the Instagram Android app. This code was discovered by a TechCrunch tipster, who also shared screenshots.

An Instagram spokesperson confirmed the screenshots are legitimate and said Instagram is "continuing to improve the security of Instagram accounts, including strengthening 2-factor authentication."

It is not yet clear when Instagram plans to roll out the new two-factor authentication method, but it could come soon as it appears to be nearly finished based on the screenshots.

Top Rated Comments

106 months ago
I’d rather an option for all services to have no two factor authentication. It’s a real bother for those who take the time to use a password manager to generate strong, unique passwords. Then store said passwords in an encrypted vault protected by one strong password.

At least create a standard for two factor authentication. So our password managers can automatically receive and fill the code.

As it stands. Two factor just increases login time.
I find it hilarious when im logging into iCloud on my Mac and it asks me for two factor, and then sends the code to the freakin laptop cause it’s already authorized. I would love to see a standardized two factor login.
Score: 4 Votes (Like | Disagree)
hank moody Avatar
106 months ago
Please, just stop promoting google auth.
There are plenty of BETTER and open source apps out there to talk about.
Score: 3 Votes (Like | Disagree)
106 months ago
I’d rather an option for all services to have no two factor authentication. It’s a real bother for those who take the time to use a password manager to generate strong, unique passwords. Then store said passwords in an encrypted vault protected by one strong password.

At least create a standard for two factor authentication. So our password managers can automatically receive and fill the code.

As it stands. Two factor just increases login time.
1Password handles TFA with One-Time Passcodes if you use their app.
Score: 1 Votes (Like | Disagree)
106 months ago
These apps are just distractions to me. They are generally fun to scroll and get a chuckle or see something interesting. But if they are unable to secure their systems, and instead start to make me have to download another app to use their app, and click multiple times to get into an app that is at best a fun diversion, then I will just delete my account and the app and move on.
Score: 1 Votes (Like | Disagree)

Popular Stories

Meta

Meta Agrees to Limit Teens' Time on Facebook and Instagram, Calls on TikTok and YouTube to Match

Wednesday August 26, 2026 3:28 pm PDT by
Meta today said it will implement major changes to Facebook and Instagram's child safety features as part of a settlement agreement with almost all U.S. states. Here's what will change for users under 18 on Instagram and Facebook if the agreement is approved. Time Limit - Teens will have a two-hour daily time limit on Facebook and Instagram, though it can be overridden by a parent. The...
All Screen iPhone 2030 Feature Sans Text

iPhone 18 Pro: Nine Reasons Not to Upgrade This Year

Monday September 7, 2026 5:01 am PDT by
Apple is set to unveil new iPhone 18 Pro and iPhone 18 Pro Max models on Wednesday, September 9, and the devices are expected to feature a design that's largely similar to the iPhone 17 Pro models, with a peppering of enhancements inside. Major changes are not expected until next year, when Apple is expected to introduce a radically redesigned 20th-anniversary iPhone. If you're thinking of...
apple watch series 12

Leak Hints at Four New Features for Apple Watch Series 12 and Ultra 4

Monday September 7, 2026 8:57 am PDT by
Ahead of the announcement of the Apple Watch Series 12 and Ultra 4 later this week, code in the watchOS 27 and iOS 27 betas points to a series of new features for the product line. The information comes from a new post from MacRumors forums member "pdfu." The findings include: New "Readiness" app: An all-new separate Watch app referred to in code as "Readiness," distinct from the...