Give Someone Access to Instagram Without Sharing the Password

Hiring a social media manager usually opens with the wrong request: send over the login. You can give someone access to Instagram account management without doing that, and Meta publishes three separate routes for it. Each one keeps the password with you, records what the other person did, and comes apart cleanly when the work ends. If a shared mailbox is part of the same handover, Gmail delegate access is the equivalent idea on Google’s side.

How to give someone access to Instagram account management without the password

The short answer: three Meta routes, none needs your password

1. Shared access, set up inside the Instagram app, for a person who posts and engages.
2. A person in your business portfolio, set up in Meta Business Suite, for a freelancer who needs ads or insights alongside posting.
3. A partner, also in Meta Business Suite, for an agency that brings its own staff and wants the account reachable from its own portfolio.

Which route fits a freelancer, an agency or a co-owner

A co-owner is the case worth slowing down on: all three routes are revocable by whoever holds control, so settle who holds it first.

Instagram shared access: invite a person from the app

Who can use it: eligible accounts only, not teen accounts

Instagram’s help page on sharing an account states that shared access is only available to eligible Instagram accounts, and that teen accounts cannot use the feature. So this route may simply not appear for you. Instagram also publishes caps tied to Meta One plans: up to 4 people on Advanced, up to 8 on Expert and up to 30 on Max. Those figures move, so recheck them before you promise a client team anything.

Invited people can do less than a login allows: Instagram says they can post, like and comment without your password, and from a professional account they can also run ads and view insights.

Sending the invite and the 7-day window to accept

In the app, open your profile, tap Menu in the top right, tap Shared access, then Invite people. Search for and select the accounts, tap Continue, then Send invite.

Invitees then have 7 days to accept. You are notified when someone accepts or declines, and an expired invite can be sent again. Someone you have blocked cannot send you a share invite, and if you block a person who already has shared access, they lose that access automatically.

The person you invite accepts from a notification, then switches to your account from the account switcher. Instagram says invites can only be sent and accepted in the app, and that permissions, inbox access and story access are managed there too, so do the setup and the offboarding on a phone. Someone you invited can also leave the shared account from its own menu.

Inbox and story access stay off until you allow them

Shared access does not hand over your direct messages or your stories by default. Both are separate switches under Shared access, in the Manage section, as Inbox access and Story access. Turn the toggle on for one person and tap Allow, or turn it off to take that piece back without touching the rest. Instagram also notes that message access includes the account’s chats with Meta AI, and that once inbox access is on, people in those chats see that the account is shared.

A contractor publishing Reels rarely needs the customer inbox too.

Checking what they did in Account activity

Under Shared access, tap Account activity to see shared access activity on the account, or tap Options next to one person’s profile and open their activity alone. Instagram lists shared posts and reels, comments, liked posts and new followers, and says the list includes but is not limited to those, so it is not a complete audit log. It also notes that people you share with can block others on your behalf and may be able to see who you have blocked.

Give someone access to an Instagram business account through a business portfolio

Add the Instagram professional account to your business portfolio

Meta’s help page on adding an Instagram account to a business portfolio lists the requirements first: you have an Instagram professional account, you have full control of the business portfolio, and the Instagram account is not linked to another business portfolio. It states the limit directly: each Instagram account can only be added to one business portfolio. The same bullet covers the account that already sits elsewhere: you can still be given access to it, or you can add it to your portfolio once it has been removed from the other one. An account stranded with a former agency is recoverable without a password handover.

The steps on desktop are: go to Settings in Meta Business Suite for your business portfolio, click Instagram accounts below Accounts in the left menu, click Add, review the information on screen, then click Add Instagram account. A new window opens for you to enter your Instagram username and password, and if two-factor authentication is on you enter your security code, then click Confirm.

That is the one moment credentials appear in this guide. You are the one typing them, into Meta’s own window, to attach your own account to your own portfolio. No agency should do it for you.

Invite people and assign the Instagram account with only the access they need

Meta’s page on adding people to a business portfolio says only people with full control can add others. Open Settings, click People, then Invite people, enter an email address or pick a managed Meta account, choose portfolio permissions, then select the business assets and the permissions on each one before sending. The person has to accept the invitation.

Meta’s own advice is the line to follow: assign only the access people need. New members get basic access by default, and adding a task later is easier than undoing one.

Why business portfolio permissions override the rest

Meta states on the same page that business portfolio permissions override all others. That is why a tidy account can still behave strangely: a portfolio-level permission is deciding, not the setting you remember changing. Audit access from the portfolio outward.

Agencies: share the account as a partner, not as a login

What the agency sends you: its business portfolio ID

Meta’s page on giving a partner access says you can only add partners if you have full control of your business portfolio, and that your partner must have a business portfolio of its own and tell you its business portfolio ID. If an agency cannot produce that ID, it is not set up for the documented route.

Full control versus partial access and task permissions

You then choose how much the partner gets. With full control, Meta says the partner can manage everything but cannot share the business asset with another business. Partial access, in Meta’s wording, provides permissions to complete specific tasks, so you can grant managing ads or responding to messages without granting the rest. Meta also notes that someone else with full control of your portfolio may need to approve the action.

Partial access with named tasks is the sane default for a new agency.

When an agency asks to request access instead

Some agencies start the request from their own side; others ask you to add your Instagram account into their portfolio. The first is documented. An agency with full control of its own portfolio can ask a partner to assign it their assets, supplying your email address and business portfolio ID and naming the asset types and permissions it wants. You approve or deny, and you pick the specific assets and permissions that actually get shared, so a request is reasonable to accept.

The second is not: under the single-portfolio rule above, your account would sit in a portfolio you do not control. Partner access keeps the asset in yours, and you can end it yourself.

Manage roles on Instagram for boosting and ads

Page roles on the connected Facebook Page

Instagram’s page on letting someone else boost posts lists three routes: Page roles on the Facebook Page connected to your business account, roles in Business Manager if that is where you manage Page roles, and adding people to your advertising account. Facebook Page access has its own types and steps, so treat this as a pointer, not a guide.

Ad account access that never lets anyone log in as you

The useful detail is in the third route: adding people to your advertising account does not give them permissions to log in as you. For a media buyer who only touches campaigns, that is the narrowest grant available, and the one to ask for when someone wants “access to the Instagram” but means the ad account.

Removing access when the work ends

Revoke shared access and the inbox and story toggles

Shared access is managed in the app, on the screen you set it up on. Open Shared access, check Account activity one last time if there is any dispute, toggle Inbox access and Story access off for the person under Manage, then remove them from their entry in the people list, where Options sits to the right of their profile.

Remove a person or a partner from the business portfolio

For a partner, Meta’s remove-a-partner page gives the steps: go to Settings in Meta Business Suite for your business portfolio, click Partners in the left menu, click Options in the top right, select Remove from business portfolio, then click Remove partner. Only someone with full control can do it, and a missing Partners option usually means you lack it.

For an individual, Meta’s page on removing people from a business portfolio gives the steps: Settings, People in the left menu, the person’s name, then Remove and confirm. That ends their access to the portfolio and to every asset they held through it, and another person with full control may need to approve it in Requests.

If the password was ever shared: change it and log out of other devices

A password that has been in a group chat is no longer a password. Change it, then end the sessions yourself rather than assuming the change did: our walkthrough of logging out of all devices on Instagram covers the Accounts Center path.

Put account access in writing before anyone starts

What the agreement names: who, which assets, which tasks, end date

A short written agreement beats a long argument. Name the individual or the agency portfolio, the assets covered, the tasks granted, who holds control, the date access ends, and what happens to drafts and media on the way out.

No outside or bought accounts on your assets without your written agreement

A bought account never holds a role on assets that belong to a client unless the client has put that agreement in writing, and the rule binds the contractor as much as the client. If someone proposes adding an account you have never seen to your portfolio, the answer is no until you know whose it is and have agreed to it on paper.

If you buy accounts for your own testing or management work, keep them in their own portfolio, away from client assets. PVAVRT sells Instagram accounts for legitimate marketing, automation, QA testing and account-management work; Instagram’s terms bar buying or selling accounts, and Instagram can close any account at any time. Our guide to what phone verification covers on Instagram accounts sets out what the phone-verified label on a listing does and does not cover.

What Instagram’s Terms of Use say about login credentials and transferring an account

Section 4.2 of Instagram’s Terms of Use rules out selling, licensing or purchasing an account, or data taken from the Service. The same clause says that bar includes “attempts to buy, sell, or transfer” anything about an account, and gives the username as its example. The same section also bars soliciting, collecting or using the login credentials of other users.

Note the limits: those clauses are about transferring accounts and harvesting other people’s credentials, not a ban on telling your own colleague your own password. The reason to use the routes above is still strong: your password stays private, every action is attributable, and removal is immediate. A login from a device the account does not recognize can bring an extra prompt to confirm who is signing in, and a contractor holding that login cannot answer it for you. If enforcement does land on the account, Account Status is where Instagram shows what was removed or limited.

Before you order accounts for client work

Set up the routes above for anything that belongs to a client, and keep your own stock separate. Questions about keeping client assets separate from any accounts you order are easier to settle before an order than after one: message PVAVRT on Telegram @pvavrt before you buy.