Connecting Instagram to AutoPost

Contents

0. Cover & contents

1. Overview

2. Understanding the terms

3. Step A — Setting up a professional account

4. Step B — Setting up a Meta app

5. Step C — Adding the Instagram use case

6. Step D — Adding two permissions

7. Step E — Registering the redirect URL

8. Step F — Making your account an Instagram tester

9. Step G — Connecting in AutoPost

10. Step H — Your first post

11. Managing connected accounts

12. Troubleshooting

13. Security and privacy

14. Checklist

1. Overview

What you'll achieve

After following this guide, AutoPost can send photos and Reels to your Instagram account: right away when you press Send now, or automatically at the time you schedule.

It works with the official Instagram sign-in and your own Meta app. You never give your Instagram password to AutoPost. For an Instagram account you own, this flow works without submitting App Review to Meta — it was tried for real on 29 September 2026.

Estimated time

One time only. Most of the time is spent on Meta's site and instagram.com.

What you need

What AutoPost sends to Instagram

One post can hold one photo/video, or a carousel (a swipeable post) of 2–10 photos/videos. In a carousel, every photo must still be a JPEG, alt text is filled in per photo, the caption is written only once, and Instagram crops all media to the ratio of the first item (the cover) — keep the ratios the same, for example 4:5.

2. Understanding the terms

3. Step A — Setting up a professional account

Checking the account type

1. Open instagram.com in your browser and sign in with the account you want to connect.

2. Open Settings.

3. Under Your insights and tools, look for the Professional account menu.

If that menu is there and shows a Category (for example Entrepreneur), your account is already professional. Go on to Step B.

If the account is still personal

Switch it to a professional account first. It's free, and you can switch back at any time.

1. In the Instagram app, open Settings, then look for the Account type and tools menu.

2. Choose Switch to professional account.

3. Follow the prompts: choose Creator or Business, then pick the category that fits best.

The menu names can differ slightly depending on the version and language of your Instagram app.

4. Step B — Setting up a Meta app

If you already have a Meta app

For example the app you created while following the Facebook Page guide (/panduan/facebook/en). Just use that app. This guide was tested with the same app: one app can serve a Facebook Page and Instagram at once. Go on to Step C.

If you don't have a Meta app yet

Follow Step B in the Facebook Page guide (/panduan/facebook/en) to create an app at developers.facebook.com. There's only one difference: at the Use cases step, tick Manage messaging & content on Instagram (with or without Manage everything on your Page). If you tick it there, you can skip Step C.

5. Step C — Adding the Instagram use case

1. At developers.facebook.com, open your app.

2. In the left menu, choose Use cases.

3. Press Add use case at the top right.

4. A window for adding more use cases opens. Under Filter by, choose Content management.

5. Tick the Manage messaging & content on Instagram card.

6. Press Save.

Your app now has two use cases (or one, if it's a new app just for Instagram). Each has a Customize button.

6. Step D — Adding two permissions

6.1 Opening the setup page

1. On the Manage messaging & content on Instagram card, press Customize.

2. The Customize use case page opens. At the top left there's an Instagram API selector. Below it are the menus Permissions and features, API setup with Instagram sign-in, an API integration helper, and API setup with Facebook sign-in.

3. The one AutoPost uses is API setup with Instagram sign-in. The API setup with Facebook sign-in menu isn't used.

The API setup with Instagram sign-in page has three cards at the top — Instagram app name (for example AutoPost-IG), Instagram app ID, and Instagram app secret — followed by five numbered steps. Here's what you do and don't need to do:

6.2 Adding the permissions in Permissions and features

1. In the left menu, choose Permissions and features.

2. Find the instagram_business_basic row, then press + Add.

3. Find the instagram_business_content_publish row, then press + Add.

4. Both are now marked Ready for testing, and their button changes to Actions.

You don't need to add any other permission.

7. Step E — Registering the redirect URL

7.1 Copying the address from AutoPost

1. In AutoPost, open the Social accounts menu, then on the Instagram card press Connect (it says Manage if an account is already connected).

2. In the How to connect card, find the blue box Redirect URL for your app.

3. Click the address in that box. The whole address is selected at once. Copy it (Ctrl+C).

For AutoPost at app-autopost.solusikecerdasankomputasi.com, the address is:

https://app-autopost.solusikecerdasankomputasi.com/api/sosial/instagram

7.2 Pasting it into Meta's dashboard

1. Go back to API setup with Instagram sign-in in Meta's dashboard.

2. Scroll to 4. Set up Instagram business sign-in, then press Set up.

3. The Set up Instagram business sign-in window opens. Paste the address into the Redirect URL field.

4. Press Save.

5. The step 4 card now has a green check mark and a sentence like "Use the URL below in an anchor tag or button…". That sentence is meant for developers; you don't need to do anything else here.

8. Step F — Making your account an Instagram tester

As long as the app hasn't passed App Review, Instagram permission can only be given by accounts that have a role in the app. That's why your Instagram account needs to become an Instagram Tester, and the invitation must be accepted.

8.1 Adding the tester in Meta's dashboard

1. In the app dashboard's left menu, choose App roles → Roles.

2. Press Add People.

3. A window for adding people to your app opens. At the top are Administrator, Developer, Tester, and Analytics User. Don't choose any of them.

4. In the section for additional roles for this app, choose Instagram Tester.

5. In the search field, type your Instagram username (without @). Choose your account from the suggestions.

6. Press Add.

Your account now appears in the App roles list with the Instagram Tester role and the status Waiting for approval (or Pending).

8.2 Accepting the invitation on Instagram

The invitation is accepted from that Instagram account itself, in a browser.

1. Open instagram.com and sign in with the Instagram account you just invited.

2. Open Settings → Apps and websites. The direct address is instagram.com/accounts/manage_access/.

3. Choose the Tester Invites tab.

4. On the invitation from your app (for example AutoPost-IG), press Accept.

By pressing Accept, you state that you act on behalf of the app owner and agree to Meta's Platform Terms and Developer Policies. Since the app is your own, that's expected.

Once accepted, the invitation changes to AutoPost-IG — Authorized by you on … with a Remove button. Don't press Remove here: that button takes your account off the tester list.

9. Step G — Connecting in AutoPost

9.1 Copying the Instagram app ID and secret

Both are on API setup with Instagram sign-in (Step D, 6.1), in the top cards.

1. Instagram app ID — copy the number.

2. Instagram app secret — press Show, then copy all 32 characters. If Meta asks for your Facebook password first, enter it yourself — never give it to anyone else.

9.2 Filling in the form

Go back to the Instagram page in AutoPost. Below the redirect URL box there's a form:

1. Instagram App ID — paste the Instagram app ID. It's 10–20 digits.

2. Instagram App Secret — paste the Instagram app secret. It's shown as dots on purpose.

3. Press Connect Instagram.

9.3 Giving permission on Instagram

AutoPost takes you to Instagram's permission page. It says roughly: "AutoPost-IG is requesting access to: (your account name). If you select Allow, AutoPost-IG will be able to:".

1. Check the account name in that sentence. Make sure it's the account you want to connect. If it's the wrong account, press Cancel, sign out of Instagram, sign in with the right account, then start again from 9.2.

2. View profile and access media (required) — required, already on.

3. Access and publish content — leave it on. Without this permission AutoPost can't post.

4. Press Allow. The steps on AutoPost's Instagram page use the same button name.

9.4 What AutoPost does behind the scenes

1. When you press Connect Instagram, AutoPost checks the format of the App ID and App Secret, then creates a random security code (state). That code, the App ID, and the App Secret are stored encrypted in a browser cookie that lasts 10 minutes.

2. After you press Allow, Instagram sends you back to the redirect URL. AutoPost makes sure the security code matches and that you're still signed in with the same AutoPost account.

3. AutoPost exchanges the authorization code for a 1-hour token, then immediately exchanges that for a 60-day token.

4. AutoPost reads your profile. Personal accounts are rejected.

5. The token, App ID, and App Secret are stored encrypted (AES-256-GCM) in the database. The temporary cookie is deleted.

6. Tokens are renewed automatically when 15 days or less of their validity remain. The AutoPost worker runs this check regularly (about once an hour), so you don't need to reconnect every 60 days.

9.5 Signs of success

You're back on the Instagram page in AutoPost. A green box appears at the top:

Your account appears in the Connected accounts card with the connected label. A small line below it shows the account type and how long the token is valid, for example "Creator account · token valid until Nov 28, 2026 (renewed automatically)".

9.6 What "1 of 3" means

Each AutoPost account can connect at most 3 Instagram accounts. This limit is enforced in the database. Once you have 3, the form can still be used to reconnect the same account; a fourth account is rejected with the message "There are already 3 Instagram accounts. Disconnect one first if you want to replace it."

10. Step H — Your first post

10.1 Quick rules before sending

• Every Instagram post must have a photo or video.

• Photos must be JPEG (.jpg), at most 8 MB. The ratio must be between 4:5 (portrait) and 1.91:1 (landscape). Square (1:1) is safest.

• Videos are published as Reels (requirements in 10.5).

• At most 5 hashtags and 2,200 characters.

• Links become plain text in the caption.

The Limits per platform card in New post counts two rows for Instagram: Instagram (x/2200) and Instagram · hashtags (x/5).

10.2 If you only write text (no image)

Choose the Instagram account under Send to without a photo or video, and the composer immediately shows a red warning:

While that warning is there, Send now and Schedule are on hold: pressing the gold button only shows the same message, and nothing is sent. Save as draft still works. The easiest way to add an image: a Design card (10.3).

10.3 A design card from your text

Image studio below the composer can turn your text into a branded image.

1. Open New post and write the post caption.

2. In Image studio, section 1. Image source, choose Design card. Fill in a large title for the card. If you leave it empty, the first line of your text is used.

3. In 2. Aspect ratio, choose 1:1 (or 4:5).

4. In 3. Branding, fill in the Account name on the image field, for example @your_account. Tick Show account name if you want the name to appear.

5. Check the Preview, then press Use this image. The message "The image is ready to use for this post." appears.

6. Under Send to, choose your Instagram account. Deselect other accounts if you only want to test Instagram.

7. Choose Send now, then press the gold Send now button.

After about 20 seconds, the green message "Sent to 1 account." appears.

10.4 A JPEG photo from your gallery

1. In New post, press Upload from gallery and choose a .jpg photo. The message "Media uploaded & ready to send with this post." appears.

2. Look at the Photo check card on the right. A photo that fits Instagram is marked Ready, with its format, size, and ratio (for example JPEG · 1080×1080 (1:1)).

3. Choose the Instagram account under Send to, then Send now. The result is the same: "Sent to 1 account." within about 20 seconds.

10.5 A video becomes Reels

1. Press Upload from gallery and choose an MP4 or MOV video.

2. Choose the Instagram account under Send to, then Send now.

3. First you see "Saved — sending to the selected accounts…". Instagram needs time to process the video. Wait until "Sent to 1 account." appears — in the 29 September test, a 10-second video took about 40–60 seconds.

Every video from AutoPost is published as Reels, not as a regular feed video. Alt text doesn't apply to Reels.

10.6 Checking the result

In AutoPost, open the Posts menu. Successful sends have the status sent. Failed sends have the status failed; the reason is in Details per account, and the Resend failed button is available.

On Instagram, open your profile. Reels have a video icon in the corner of their tile; photos and design cards appear as regular tiles.

Open the Reels: the caption and hashtags appear in full, just as you wrote them in AutoPost.

10.7 Scheduling and Auto post

• Schedule: choose Schedule, fill in the date and time in the Date & time (WIB, UTC+7) field, then press Schedule post. The AutoPost worker sends it on its own at the right time — your laptop can be off. Once it's saved, the message "Post scheduled." appears. The same rules apply: with no photo/video or more than 5 hashtags, the composer holds the schedule back.

• Auto post: an Instagram account can be chosen as a target. If there's no suitable image, Auto post makes a design card itself so the Instagram send isn't rejected.

• The full composer guide is the New post guide (the Download guide (PDF) button in the header of the New post page).

11. Managing connected accounts

11.1 Retest

The Retest button in the Connected accounts card opens the token, makes sure it hasn't expired, reads your profile on Instagram again, and renews the token if it's close to expiring. If the account is healthy, one of these messages appears:

• "Retest finished — the account is still healthy and ready to send."

• "Retest finished — the account is healthy and we extended its token too."

If Instagram is busy (rate limits, network, a momentary outage), the account status is not changed; the message ends with "We didn't change the account status — try testing again shortly." If the token has expired or been revoked, the account gets the needs reconnecting label. Other errors give it the has a problem label. The reason is shown in red below the account name.

11.2 Reconnecting or changing the App Secret

Fill in the Instagram App ID and Instagram App Secret again, press Connect Instagram, then Allow with the same Instagram account. AutoPost refreshes the token (it doesn't create a new account), and scheduled posts keep running.

Reconnect when:

• the account has the needs reconnecting label;

• you change (reset) the Instagram app secret at Meta;

• you move the account to a different Meta app.

11.3 Disconnect

The Disconnect button removes that account from AutoPost together with its token and App Secret. AutoPost asks "Disconnect this account? Its token is deleted too."; press Yes, disconnect to continue. The result: "Account disconnected — its row and token are gone from the database."

Disconnecting also removes that account from scheduled posts and auto posts that target it. If you only want to refresh the token, don't disconnect — reconnect instead (11.2).

Disconnecting in AutoPost does not revoke the permission on Instagram's side. To revoke it too, open instagram.com → Settings → Apps and websites, choose the Active tab, then press Remove on your app (for example AutoPost-IG).

11.4 Deleting posts

Deleting a post in AutoPost's Posts menu only removes it from AutoPost. A post already published on Instagram stays there — delete it on Instagram if needed.

11.5 Adding a 2nd and 3rd account

1. Make the next Instagram account an Instagram Tester in the same app (8.1), then accept the invitation from that account (8.2).

2. In your browser, sign out of the first Instagram account and sign in with the next one.

3. Repeat 9.2 and 9.3 with the same App ID and App Secret. On the permission page, check that the account name shown is the next account, not the first one.

At most 3 Instagram accounts. We haven't tried this with a second account yet; the flow is the same as for the first account.

12. Troubleshooting

All AutoPost messages below are written exactly as they appear on screen. On the Instagram page they start with "Failed:"; in Details per account, messages that will be retried end with "(retrying automatically, attempt N of 4)". Variable parts are marked "…".

12.1 When you press "Connect Instagram" or come back from Instagram

These messages appear as a red banner starting with "Failed:" at the top of the Instagram page, for example:

12.2 Problems that don't show an AutoPost message

12.3 A text-only post fails

Before 29 September 2026, the composer didn't hold back posts to Instagram that had no image. Such posts were still sent, and then failed. The screenshots below show that old behavior. Now the composer holds them back first with a red warning (10.2).

If you still have an old post like that (for example a schedule created before the fix), the reason appears in Details per account:

Resend failed won't work as long as that post still has no image. Create a new post with a photo, video, or design card. If every send fails, the composer fields are now not cleared, so you can add an image right away and send again.

12.4 When sending or after scheduling

The reason for a failure appears in the Posts menu, in the Details per account section of the post card.

12.5 More than 5 hashtags

If the Instagram account is selected and the text has more than 5 hashtags, a red box appears right below the text field, and the composer holds back Send now and Schedule. The message:

In the box below the text field, that message continues with "Send now and Schedule are on hold until there are 5 hashtags or fewer; the draft can still be saved."

Save as draft still works. What counts as a hashtag: # followed by letters, digits, or underscores, with at least one letter. So #2026 isn't a hashtag, and a # inside a link address is ignored.

For old posts that got through with more than 5 hashtags, AutoPost drops the 6th hashtag onward when sending. The post is still sent, with a note in Details per account: "Instagram allows 5 hashtags per post, so N hashtags were not sent: #…".

13. Security and privacy

13.1 Protecting the Instagram app secret

• The Instagram app secret (App Secret) is pasted in one place only: the Instagram App Secret field in AutoPost.

• Never paste it anywhere else: group chats, email, shared notes, screenshots, or other sites that ask for it.

• AutoPost never asks for your Instagram or Facebook password.

• Turn on two-factor authentication on your Instagram account and your Facebook account.

13.2 What AutoPost stores

• The token, App ID, and App Secret are stored encrypted (AES-256-GCM) in the database and are only opened on the AutoPost server: when exchanging and renewing the token, when sending, and during Retest. AutoPost pages never show your token.

• While connecting, the App ID and App Secret are briefly stored encrypted in a browser cookie for at most 10 minutes, then deleted.

• AutoPost only asks for two permissions: instagram_business_basic and instagram_business_content_publish. AutoPost can't read your direct messages (DMs) or comments.

13.3 If the App Secret leaks

1. In Meta's dashboard, reset your app's secret.

2. Open API setup with Instagram sign-in again, press Show, and make sure the Instagram app secret has changed. Copy the new value.

3. In AutoPost, reconnect every Instagram account with the new secret (11.2).

4. Press Retest on every account to make sure they're all healthy.

We haven't photographed where the reset button is yet, so step 2 matters: make sure the value you paste really is the new one.

13.4 Stopping AutoPost for this account

1. Press Disconnect in AutoPost (11.3).

2. Revoke the app's permission at instagram.com → Settings → Apps and websites → Active (press Remove on your app).

3. If you also want to leave the tester list, open the Tester Invites tab on the same page and press Remove.

4. If the app isn't used for anything else (including a Facebook Page), you can delete the app at developers.facebook.com. Use cases that have been added can't be removed on their own.

14. Checklist

• The Instagram account is a Business or Creator account.

• The Meta app has the Manage messaging & content on Instagram use case.

• In Permissions and features, instagram_business_basic and instagram_business_content_publish are marked Ready for testing.

• In 4. Set up Instagram business sign-in, the Redirect URL matches the redirect URL box in AutoPost exactly, and step 4 has a green check mark.

• The Instagram account was added as an Instagram Tester, and its invitation was accepted (Accept) on instagram.com.

• The Instagram app ID and Instagram app secret are pasted into AutoPost (not the Facebook app ID).

• Allow was pressed with the Access and publish content switch on, and the account shows as connected.

• A test send with a JPEG photo or a 1:1 design card has the status sent and appears on the Instagram profile.

• (Optional) A test Reels was published.

Need help? Open the Help menu in AutoPost, or the New here? How to use this page box on the Instagram page.