This website uses cookies

Read our Privacy policy and Terms of use for more information.

GuideGDE-059
TopicOsintgram
DomainInstagram account analysis
Last updatedSeptember 2026

Short answer: Run Osintgram from a dedicated, non-primary Instagram account to pull followers, following lists, captions, hashtags and photo metadata from a public account, and treat the ban and data-protection risks as real from the first query.

What it isWhat is Osintgram?
How to run itHow do you run an Osintgram analysis?
What goes wrongWhat are the pitfalls of using Osintgram?
Go deeperRelated guides
What it is

What is Osintgram?

Osintgram is the practice of using the open-source Osintgram tool to run an interactive command-line analysis of a public Instagram account, extracting followers, following, captions, hashtags and photo metadata through Instagram's own API using an investigator's logged-in session.

Osintgram is a free, open-source Python tool, actively maintained on GitHub with more than 13,000 stars, that offers an interactive shell for pulling structured data from a target Instagram account by username. It authenticates using the investigator's own Instagram credentials and works through Instagram's API rather than scraping rendered pages, returning followers, following lists, captions, hashtags, photo descriptions and, where available, addresses tied to geotagged photos.

Because it logs in as a real Instagram account to make these requests, the tool's own documentation warns against using a primary personal account, since automated querying at volume risks a temporary or permanent ban.

When to use this guide
•Extracting a public account's follower and following lists in structured form for network analysis
•Pulling captions, hashtags and photo metadata across a target's post history in bulk
•Building an account overview as a starting point before manual review of individual posts
•Cross-referencing an Instagram handle against findings from other platforms in a wider identity investigation
How to run it

How do you run an Osintgram analysis?

Six steps from setting up a dedicated account through to extracting and reviewing the data responsibly.

The tools

The following tools are used across the steps below.

Osintgram: Free, open-source (GPLv3 licence). The command-line tool itself, authenticating through Instagram's API.

Before you begin
Stop at the login: Osintgram requires the investigator's own Instagram account credentials to authenticate, since it queries Instagram's API as a logged-in user. The tool's own documentation recommends never using a primary personal account and disabling two-factor authentication on the account used, given the automated query volume involved.
Legal considerations: Instagram's terms of service prohibit automated data collection through unofficial tools, and using Osintgram is a terms-of-service violation that can result in the querying account being suspended or permanently banned, independent of any question of the target's privacy. Extracted personal data, including follower lists, captions and any geotagged addresses, is personal data under GDPR and equivalent frameworks; document a lawful basis for the specific investigation before running an extraction and avoid collecting more than the case requires.

Subscribe to keep reading

This content is free, but you must be subscribed to Signal & Shadow to continue reading.

I consent to receive newsletters via email. Terms of use and Privacy policy.

Already a subscriber?Sign in.Not now