A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
At Instagram’s two-factor prompt, select Try another way and, if available, choose Send a login link to the registered email address or phone number; if that option is unavailable or loops back to the code screen, continue through Instagram’s official account-access process.^1^
What the rejected codes indicate
Microsoft Authenticator is acting as a software TOTP token. During initial setup, Instagram supplied a secret key—normally through a QR code—and Authenticator uses that key plus the current time to calculate each code.^2^
A code can therefore look normal and change every 30 seconds even when Instagram no longer accepts it. Microsoft documents that the countdown represents the code changing every 30 seconds; it does not confirm that the service receiving the code still has the matching registration.^3^
Because automatic time, current software, immediate entry, multiple login devices, and backup codes have already been tested, repeating those checks is unlikely to distinguish the cause.
Answers to the specific technical questions
- Can the stored keys be compared?
There is no documented user-facing Microsoft or Instagram operation that displays and compares the existing secret on both sides. The Authenticator account data is stored on the device, while Instagram controls its corresponding 2FA registration.^3^ - Can Microsoft verify that the displayed code is valid for Instagram?
Microsoft can review submitted Authenticator diagnostic logs for app problems. Those logs remain in the app until Send feedback is selected and can contain device, operating-system, server-address, and operational diagnostic information.^3^
The documentation does not describe a Microsoft facility that validates an Instagram code against Instagram’s stored secret. Only Instagram can accept or reject that registration. - Could travel have changed the key?
TOTP code generation is based on the stored seed and time, not the displayed time-zone name. Nothing supplied establishes that the Japan trip changed the stored entry. Since the clock is now automatic and synchronized, travel alone is not a demonstrated cause. - Could the iOS update have changed it?
The available documentation does not establish that an ordinary iOS update rewrites third-party TOTP credentials. It does document backup and restoration requirements, but that is relevant mainly when an app or device is restored or replaced—not merely updated.^4^ - Can the existing entry be repaired in place?
There is no documented user-facing method to resynchronize or replace the secret inside an existing third-party entry. Re-registration normally requires access to Instagram’s 2FA settings so Instagram can issue a new QR code or setup key.
Safest next actions
- On the Instagram 2FA screen, select Try another way.
- If offered, select Send a login link and use the registered email address or phone number.^1^
- If that is unavailable or returns to the same screen, use Instagram’s official account-access form.^5^ State concisely that:
- password reset succeeds;
- both authenticator and backup codes are rejected;
- friend verification completed but produced no follow-up;
- recovery loops to the same 2FA prompt.
- Do not delete the Instagram entry or reinstall Authenticator. Deletion could remove the only remaining local credential without fixing Instagram’s registration.
- Preserve Authenticator before any device reset: on iPhone, enable iCloud Drive, iCloud Keychain, iCloud Backup, and the Authenticator toggle under Apple Account → iCloud → Saved to iCloud.^6^
- Since feedback was already submitted, contact Microsoft Authenticator support or its forum and provide the feedback reference. Microsoft’s supported escalation after submitting logs is Authenticator top-level menu → Send feedback, followed by Support or the Authenticator forum.^7^ Do not post the diagnostic package or personal account details publicly.
If Instagram restores access, immediately disable and re-enable authentication-app 2FA, scan the newly issued QR code, test one generated code before signing out, and generate new backup codes.
References
- I can’t login to my instagram account - Microsoft Q&A
- Authentication methods in Microsoft Entra ID - OATH tokens
- Microsoft Authenticator FAQs | Microsoft Support
- Restore account credentials from Microsoft Authenticator | Microsoft Support
- Instagram Help Center
- Transfer Microsoft Authenticator account entries to a new phone
- [Personal accounts](https://support.microsoft.com/authenticator/troubleshoot-problems-with-microsoft-authenticator)