instagram told me I had been hacked today and I needed to prove I was me and asked me to change my password

[left1000]

instagram told me I had been hacked today and I needed to prove I was me and asked me to change my password.

99.9% this is new anti gallery-dl style ripping technology.

[instagram][info] Use '-o cursor=QVFCR1FMY2Q5VXo1LVkyU0o2MURnSFE4TEZackI0ZjRFZHFFRExmYmx5RS1tODhIbm9fOHdyMnJSQ0x4QWh3NXVsN3F3R192eE5zT01OTFRSRng5Yl9COQ==' to continue downloading from the current position
[instagram][error] HTTP redirect to challenge page (https://www.instagram.com/challenge/)
reran

[instagram][error] HTTP redirect to challenge page (https://www.instagram.com/challenge/)

cannot rerun with -v or -vv or whatnot because I followed insta's instructions

edit: to clarify everything is fine with new password so far, but if this happens again is there anyway to help diagnose things?

[left1000]

It happened again, any command I can run to provide useful feedback on this issue? (I haven't reset my lock out yet like I did last time.)

Hmm, looks useless, all I get now is redirected to https://www.instagram.com/challenge/ I would've needed to predict this in advance randomly and run -vv or some such yesterday not today :(

the only odd thing I did to instagram via gallery-dl is try to rip a reddit username and got a rip of a random instagram that they'd mentioned so maybe the referral process of following the reddit link to instagram is what instagram thought was phishy

this time I reset my password, got back into the website, updated gallery.conf file and I am getting

PS D:\gallery-dl> .\gallery-dl -vv --write-pages https://www.instagram.com/ANYUSERNAME/
[gallery-dl][debug] Version 1.23.0 - Executable
[gallery-dl][debug] Python 3.7.9 - Windows-10-10.0.19041
[gallery-dl][debug] requests 2.28.1 - urllib3 1.26.12
[gallery-dl][debug] Starting DownloadJob for 'https://www.instagram.com/ANYUSERNAME/'
[instagram][debug] Using InstagramUserExtractor for 'https://www.instagram.com/ANYUSERNAME/'
[instagram][debug] Using InstagramPostsExtractor for 'https://www.instagram.com/ANYUSERNAME/posts/'
[urllib3.connectionpool][debug] Starting new HTTPS connection (1): www.instagram.com:443
[urllib3.connectionpool][debug] https://www.instagram.com:443 "GET /ANYUSERNAME/?__a=1&__d=dis HTTP/1.1" 401 98
[instagram][error] HttpError: '401 Unauthorized' for 'https://www.instagram.com/ANYUSERNAME/?__a=1&__d=dis'

write-pages

{"message":"Please wait a few minutes before you try again.","require_login":true,"status":"fail"}

I'll probably therefore be fine later :) Still, odd that insta think's gallery-dl is phishing every few months?

[mikf]

It may very well be that the way gallery-dl does its login procedure for IG no longer properly works and/or flags your account as a potential bot. I'm personally using a cookies.txt file since that should be more reliable.

I've also updated the HTTP headers getting sent for API requests (3dacfb3) as well as the endpoint used to fetch an account's ID (50e3179, was previously https://www.instagram.com/ANYUSERNAME/?__a=1&__d=dis for which you got an error)

Maybe that helps a bit, but there might come a time when nothing but a (headless) browser is allowed to access IG. (#2912)

[Hyrtsi]

@left1000 This is what works for me:

gallery-dl -c insta.conf https://www.instagram.com/<profile> --cookies mycookies.txt --sleep 11 --sleep-request 10 --sleep-extractor 10 --verbose"

• the insta.conf has my username, pw, include posts, videos false, previews false (you don't have to use the conf at all if you provide your credientials some other way)
• I generated the cookies with my alt account using Firefox cookie exporter plugin
  • I have manually posted with my alt account, added some bio, liked accounts, commented on some to make it look like a real account
  • my other alt account that didn't have any bio, pics, activity, got banned in a day

Good luck! Just keep your downloads moderate. Maximum 1000 per day. Your account "strength" or "botness" will have a huge impact on getting ban or just a warning. If you're super cautious like me, never use your main account and do some human-like activity sometimes like messaging people, liking, following, commenting, posting some random stuff on your own.

[nothing2obvi]

@Hyrtsi

Is this still working for you? Wondering if Instagram has since changed things, because I keep getting warnings despite the following settings:

"sleep-request": [30.0, 60.0],
"sleep-429": [60.0, 90.0],
"sleep": [30.0, 60.0],
"sleep-extractor": [30.0, 60.0],