You want to set up an Instagram business account, and you want it to stay yours. Maybe you are starting fresh and you have heard the stories about accounts that get hacked or disabled with no warning. Maybe an employee or an agency opened the account years ago, and you just realized it runs on their email address and their phone number. Either way, the setup itself takes a few minutes. The part that protects you is who holds the login, the recovery details, the Facebook Page connection and the admin access. Get those into the business's hands once, and a departing employee, a lost phone or a bad week with Meta stops being a crisis. You can do all of it yourself, in one sitting, with nothing to buy.
Key Takeaways
Turn the profile into a professional account, choose Business, and set the login email and phone to ones the company controls before you post anything.
Choosing Business does not make the company the owner. Control of the login, recovery methods, connected Page and admin access does.
Staff and agencies can work through assigned access on the Page while a second trusted administrator and the recovery details stay with the business.
Authentic identity, permitted content, copyright and Instagram's Terms of Use are what account decisions rest on, and two-factor authentication protects the login but does not override them.
How do I set up an Instagram business account?
Instagram does not have a separate sign-up for business. You start with a regular profile and switch it. Instagram's help pages describe the path, and the exact menu labels can differ slightly by account and app version, so follow the wording your own app shows.
- Sign up with a company-controlled email and phone: Use an address the business owns and can always reach, not a personal inbox. If the profile already exists, skip to step two and fix the login details later in this post.
- Open your profile menu: In the app, go to your profile, open the menu, and choose Account type and tools. On the web, choose More, then Settings, then Account type and tools.
- Choose Switch to professional account: Pick the category that best describes what the business does.
- Select Business: The other choice is Creator, covered in the next section.
- Add your contact details: Confirm what customers should see, then finish. You now have the professional dashboard with performance stats and contact tools.
Instagram says professional accounts are public, so a private profile becomes public when you switch. That is worth knowing before you flip it on an older profile that has personal photos on it. Instagram explains the steps in its help page on switching to a professional account, and its Help Center covers the labels for your current version.
Business or Creator: which account type fits a company?
Instagram offers two kinds of professional account. Business is meant for companies reaching customers, such as retailers, local businesses, brands and service providers. Creator is meant for public figures, artists, influencers and content producers. For a company, Business is the fit. If you picked one and want the other, an existing account can change type through Business tools and controls, then Account type, then Switch account type.
The label itself does not change who controls the account. A Business account with an employee's personal email is still an account the employee can walk away with, and a Creator account with company-held login details is still the company's to manage. The type decides which tools you see. The login decides who is in charge.
Who should own the login, and what does that include?
Ownership means the business controls four things: the email the account logs in with, the phone number tied to it, the way sign-in codes reach a person, and the recovery options if a password is lost. If any of those belong to a single employee's personal email, phone or authenticator, that person is the real owner, whatever the profile name says.
Start with the login email and phone. Change both to company-controlled ones. A shared mailbox that two people can read works better than one person's inbox, because it survives a resignation. Change the password while you are in there.
Then turn on two-factor authentication in Accounts Center, and keep more than one recovery method. Meta's Account Security help page covers the options, and a physical security key is available as one of them. Save your backup codes somewhere the business controls, such as a locked drawer or the company password manager, not a text thread on one person's phone. Two-factor authentication lowers the chance that someone else gets into the account. It does not change what Meta's rules allow, which matters if you are thinking about it as protection against a disabling.
Last, look at the sessions and connected apps in Accounts Center. Log out of devices you do not recognize and remove any app nobody at the company can explain.
How do I connect Instagram to a Facebook Page and a Business Portfolio?
Connect the Instagram account to the company's Facebook Page, then place both in the company's Meta Business Portfolio where your account offers it. The Page connection lets the business manage messages, posts and ads across both. The Business Portfolio is the container that holds the business's assets under the company's control rather than a person's profile.
These three things are easy to mix up, so it helps to keep them apart:
- The Instagram account: The profile customers see and the login behind it.
- The Facebook Page: The business presence on Facebook that Instagram connects to.
- The Business Portfolio: Where the business's Pages, Instagram accounts and ad accounts are grouped and managed.
A Page connection on its own does not give the business full governance of the account. Check that the Page and the Instagram account both appear inside the Business Portfolio the company owns, and that you can name the people who hold full control over them. Then add a second trusted administrator. One admin is a single point of failure: if that person leaves or loses access, the business is stuck.
| What | Who should hold it | Why |
|---|---|---|
| Login email | A company-controlled address | It survives staff changes |
| Recovery phone | A company-controlled number | Codes reach the business |
| Backup codes | Owner, stored securely | Needed if the phone is lost |
| Full control of the Page | Owner plus one trusted second admin | Nobody is the only administrator |
| Day-to-day posting | Staff or agency with task access | Work gets done without control |
If your account shows different options than the ones described here, follow the prompts in your own account. Business Portfolio features and interface labels can vary by account and region.
What can staff and agencies have without getting the password?
Meta separates two kinds of Facebook Page access. Full control lets a person add or remove people, manage linked accounts, change settings and delete the Page. Task access lets a person handle content, messages, ads and performance reports without that power. Meta describes both in its Page access help page.
Give people the least access that lets them do their job. A part-time social media helper can post and answer messages with task access. An agency can run ads and reply to comments the same way. Neither needs your Instagram password or full control. When someone leaves, remove their access the same day. If the work ends with an agency, you should be able to end their access without asking them for anything.
Keep full control with the owner and the second administrator. That way the people doing the work can be swapped without anyone holding the account hostage.
What if an employee or agency created our account?
Start by checking whether the business can log in and receive the recovery messages right now. If yes, the fix is a same-day cleanup. Work through it in this order:
- Change the login email to a company-controlled address and update the phone number.
- Change the password.
- Turn on two-factor authentication and save the backup codes.
- Remove former employees, old agencies, connected apps and unknown sessions.
- Connect the account to the business's Facebook Page and Business Portfolio.
- Add the current owner and a second trusted administrator through Meta's access controls.
Do not leave an employee's personal email, phone or authenticator as the only way back into the account. If they are still around and friendly, ask them to log in with you and make the changes together. If they have already left and the business cannot log in, the cleanup is harder and depends on Meta's recovery tools, so start with the account's login screen and Instagram's recovery options. The handoff screens for an account someone else created can differ by configuration, so follow what your account shows.
Which rules does Meta publish for business accounts?
Account decisions on Instagram rest on Meta's published rules: the Community Standards, the Account Integrity and Authentic Identity policies, Instagram's Terms of Use, and the intellectual-property rules. Meta's Safety Policies page says its Community Standards apply across Facebook, Instagram, Threads and Messenger. In practice, four areas matter for a business account.
- Authentic identity: Meta's Account Integrity and Authentic Identity policy is where impersonation and misrepresenting who you are are covered. Run the account as the business it is.
- Inauthentic behavior: Meta describes this as deceptive activity meant to hide who is behind it, make activity look more popular or trustworthy than it is, or get around enforcement. Its policy update on inauthentic behavior has the definition.
- Automated activity: Instagram's terms prohibit automated access or activity that violates them, so check a scheduling or messaging tool against those terms before connecting it.
- Copyright: Post what you created or have permission to use. Meta's copyright help page explains what that means for Instagram and Threads.
If you pay or gift products to creators, the FTC says material connections must be disclosed clearly and conspicuously. Its endorsements guidance covers what that looks like.
Decisions on individual accounts can turn on content, behavior, reports, security signals and repeated violations. Nothing here guarantees an account will never be restricted, so the practical move is to keep the ownership and recovery details in order in case one is. If it does happen, our post on what to do when an Instagram business account is disabled walks through the appeal and how to keep reaching customers in the meantime.
What is the ten-minute ownership check?
Use this on a new account or one you have had for years. It fits in a lunch break.
- Account type: Confirm the profile is a professional account and note whether it is Business or Creator.
- Login details: Find the login email and phone in your settings and check that the company controls both.
- Security: In Accounts Center, look at the password, two-factor authentication, login alerts, backup methods and active sessions.
- Connected apps: Remove anything unknown or no longer used.
- Page and Portfolio: In Meta Business Suite or Business Settings, confirm the right Facebook Page and Instagram account are connected and identify the Business Portfolio that owns them.
- People: List everyone with full control or task access, and remove anyone who should not have it.
- Write it down: Record the account names, administrators, recovery contacts and where the backup codes live, and store the record with the business's other important documents.
If anything in steps two, three or six shows a gap, fix it that day. A gap in ownership stays invisible until an employee leaves, a login is lost or the account is compromised, and by then the fix is slower.
When is it worth paying for help?
Try the steps above first. For a new account, or one where you can still log in and hold the recovery details, the free route is the right one. It takes an afternoon and costs nothing.
Help is worth paying for when the account is tangled: ownership split across personal profiles, a former employee, an old agency, several Pages, ad accounts or recovery methods nobody can identify. In that case, ask for a fixed-scope job: an audit, a cleanup, documentation and a handoff you can maintain yourself. That is a different thing from a monthly contract, and a good provider will tell you what they can fix directly, what depends on Meta and what stays uncertain. Ongoing management fits when you also need content, ads, moderation or reporting. Nobody can promise approval by Meta or immunity from enforcement.
Does your company own its Instagram account?
Pick an answer to begin.
1. Your Instagram profile is set to Business and uses your company name. Does that mean the company owns it?
2. A social media helper needs to post and answer messages. What should you give them?
3. You turned on two-factor authentication. What does it do?
Frequently Asked Questions About set up instagram business account
Is an Instagram business account free?
Switching to a professional account does not carry a conversion fee. Advertising and other optional services can cost money.
Can I change my personal Instagram to a business account?
Yes. Go to Account type and tools and choose Switch to professional account. Remember that professional accounts are public.
Should my company choose Business or Creator?
Business. Instagram positions Business for companies reaching customers and Creator for public figures, artists, influencers and content producers.
Can two people manage one Instagram business account?
Yes. Connect the account to your Facebook Page and Business Portfolio, then give each person the access they need. Keep one owner and one second trusted administrator with full control.
Should an agency have my Instagram password?
No. Keep the login and recovery methods with the business and give the agency the access its tasks require.
What should I do if an employee created our Instagram account?
Change the login email and phone to company-controlled ones, change the password, turn on two-factor authentication, remove old access and connect the account to the business's Page and Business Portfolio.
The Bottom Line
A business Instagram account is set up in a few taps and protected with a few decisions. Switch the profile to a professional account, choose Business, and log in with an email and phone the company controls. Turn on two-factor authentication, connect the Facebook Page, place the assets in the Business Portfolio, and keep two trusted administrators. Staff and agencies work through assigned access, and everything stays inside the rules Meta names.
The payoff shows up on the day something goes wrong. When an employee leaves, a phone is lost or the account is locked, the business already holds the recovery details and can act without hunting for the person who set it up. The ten-minute check turns that into a habit you can repeat a couple of times a year.
If your account is tangled and you would rather hand the cleanup to someone, Web Leveling can audit who holds what, fix the ownership and hand it back documented, through our social media marketing work. If the steps above are enough, do them yourself. We work with small and medium businesses across the country and overseas. Tell us what your Instagram setup looks like today, and we will tell you whether it needs help.
Terms
Instagram setup words in this post
Tap a term to see what it means.
Professional account. An Instagram account type, either Business or Creator, that adds performance stats and contact tools.
Business account. The professional account type Instagram positions for companies reaching customers.
Creator account. The professional account type for public figures, artists, influencers and content producers.
Accounts Center. Meta's settings area for security, passwords and two-factor authentication across its apps.
Business Portfolio. Meta's container for a business's Pages, Instagram accounts and ad accounts, held under the company rather than a person.
Task access. Page access for content, messages, ads and performance reports without control over settings or people.
Two-factor authentication. A second step at sign-in, such as a code or security key, that protects the login.
