Quick answer: If you cannot recover your Instagram account with the password and email, Instagram's video selfie identity verification is the strongest recovery path. On the login screen follow get help or forgot password and go to the I cannot log in with other options choice; if there are photos with your face in the account, Instagram asks for a short video selfie where you turn your head in different directions. This video is not shared with anyone, is used to verify that the face movement is live, and usually resolves within two days. If the video selfie succeeds, Instagram asks you to add a secure email address and you reset the account from there. For business accounts or accounts without your face, official ID or proof of account ownership is asked instead of a video selfie.

When your Instagram account is stolen and the attacker changed both the password and the registered email, the classic password reset does not work. At this point Instagram's strongest recovery mechanism comes in: identity verification with a video selfie. This article explains this little known but very effective recovery path step by step. Read it together with the first hour guide for general emergency response.

When video selfie recovery is used

Situation Recovery path
Password changed, email intact Password reset email
Password and email changed, your face is in the account Video selfie identity verification
Business or faceless account ID or ownership proof
Two step verification stuck Backup code or trusted device

The essence of this table: if there are photos with your face in your account, a video selfie is a proof the attacker cannot imitate, and so it is the most reliable recovery path.

Video selfie recovery steps

On the login screen go to the forgot password link, then to having trouble logging in and I cannot log in with other options. If Instagram detects photos with your face in the account, it asks for a short video selfie where you slowly turn your head right, left, up and down. This video is not shared with anyone; it is processed only to verify that the face movement belongs to a live person and usually resolves within 48 hours. If approved, Instagram asks you to add a new and secure email to the account; you reset the account from this email.

If the video selfie fails

A video selfie can fail for a few reasons: if there is no photo with your face clearly visible in the account, if the light or angle is insufficient, or if the account is a business account. In this case try again, shoot in a well lit and clear setting. For business accounts Instagram asks for official ID or proof of account ownership instead of a video selfie; for this path the Facebook and Meta account recovery logic applies, because both are under the Meta umbrella. For other Instagram specific recovery steps, see the Instagram account recovery guide.

After recovery, close the root

After recovering the account, make sure the attacker cannot get in again. Log out of all sessions, revoke connected apps and enable two step verification with an authenticator app or a passkey; SMS based verification is open to a SIM swap attack. Assume the entry likely came from a phishing page or a reused password. For the right identity setup, see the password, 2FA and passkey security guide.

If no result at all

If the video selfie and other paths yield no result, you need to collect evidence and prepare for the legal path. Document change notifications, login alerts and fake posts. You can find the path to follow in the social media account cannot be recovered, digital evidence and legal process article, and the chain of custody rules in the digital evidence and chain of custody article.

The KAOS and DSET approach

DSET offers a security approach that protects the digital identity assets of organizations and individuals. Our local AI engine KAOS scans the external surface and leaked credentials to detect takeover risks, and reports every finding with a working proof, without false positives. The goal is to close the root cause before an account is stolen and turns into a recovery ordeal.

Frequently asked questions

Is the video selfie safe, is my video stored? Instagram states that the video selfie is not shared with anyone and is processed only to verify that the face movement belongs to a live person. The video is deleted after verification is complete. Still, a video selfie is asked only in the official recovery flow on the login screen; any request asking for a video selfie via email or message is fake.

How long does the video selfie take to resolve? Instagram usually gives a result within two days. During this time do not try to access the account and do not open other recovery requests that confuse the process. If approved, Instagram asks you to add a secure email and you reset the account from this email.

What if my face is not in the account? If there is no photo with your face, a video selfie cannot be used. For business or faceless accounts Instagram asks for official ID or proof of account ownership. An invoice, domain ownership or documents showing that you manage the account help in this process.

Sources

To protect your Instagram and digital identity assets against takeover, contact DSET. We provide security consulting from our Ankara Hacettepe Teknokent laboratory.