Instagram OSINT tools

6 tools. 3 run with ot in a sandbox on Windows, macOS and Linux; 3 with otlite on Linux and macOS, no Docker. Compare them side by side ↓

Instagram holds photos with captions, dates and tagged places, profiles that link to other accounts, and the email addresses and phone numbers behind sign-ups. The tools below save a public profile's posts and metadata, find the location IDs posts are tagged with near a point on the map, pull a video's metadata, and check whether an email address or phone number has an Instagram account.

With ot, in a sandbox

All social media tools →

Windows, macOS and Linux, with Docker or Podman. Each tool runs in a read-only container that can reach only the sites it declares, and every result comes back in the same JSON shape.

osintverse-community/holehe

Checks whether an email address is registered on 120+ sites, without alerting its owner

Takes email → finds account
No key · Docker
Verified publisher

osintverse-community/ignorant

Checks whether a phone number is registered on Amazon, Instagram and Snapchat

Takes phone → finds account
No key · Python wheel
Verified publisher

osintverse-community/yt-dlp

Extracts metadata from videos and channels on YouTube, TikTok, X, Instagram and 1,000+ other sites

Takes url → finds account, other, url
No key · Python wheel
Verified publisher
ot install osintverse-community/holehe osintverse-community/ignorant osintverse-community/yt-dlp

Installs the first 3 in one go. No ot yet? Install it in one line.

Without Docker, with otlite

All otlite tools →

Linux and macOS. otlite installs each one with pip or git into its own virtualenv, pinned to a version it has tested: otlite install instaloader.

The 3 registry tools side by side

The registry tools on this page, compared. Select a column heading to sort by it.
osintverse-community/holeheaccountNoneOnline, passiveYesDockerNo reports yetfewer than 10
osintverse-community/ignorantaccountNoneOnline, passiveYesPythonNo reports yetfewer than 10
osintverse-community/yt-dlpaccount, other, urlNoneOnline, passiveYesPythonNo reports yetfewer than 10

Facts from each tool's manifest and what people report about whether it works. "Reaches" says whether a run stays offline, reads public sources, sends requests about the target, or may notify them.

Where to start with Instagram

  1. Check whether the email address or phone number in your case has an account (holehe, ignorant).
  2. Preserve the public profile: its posts, captions, dates and metadata (Instaloader).
  3. Look up the location IDs near a place (Instagram Location Search) to find the posts tagged there.

Before you run one

Do I need to log in to Instagram?

Often. Instagram limits what it shows to visitors who aren't logged in, so Toutatis needs the session ID of a logged-in account and Instagram Location Search takes one as an optional key (INSTAGRAM_SESSION_ID). Use an account set up for investigations, never your own.

Can these tools see private accounts?

No. They read what Instagram shows publicly, or to the account you log in with. Following a private account to see it is a decision for your rules of engagement, not something a tool does for you.

Do these tools send my search anywhere?

No. ot runs each tool on your own machine in a read-only container that can only reach the sites the tool declares, and results stay in your results folder. The registry only counts installs.

More social media tools

GitHubYouTubeAll social media tools

Esc

Try

↑ ↓ to move↵ to open