Is Instagram DM automation allowed? Meta-approved tools vs bots
Updated
Short answer: yes, Instagram allows DM automation, but only one kind. Instagram gives businesses an official way to send messages automatically, and it comes with rules. The other kind, tools that log in as you and click around like a robot, is the kind that gets accounts restricted. The question isn’t “is automation allowed?” It’s “which way is this tool doing it?”
We make a comment-to-DM tool, so keep that in mind. We have tried to write this the way we would want a competitor’s page to be written: with the limits included. Facts about Instagram’s rules come from Meta’s developer documentation and from our own published docs, linked where they are used. Where we are not certain, we say so.
The two kinds of tool
| Official API tools | Bots and scripts | |
|---|---|---|
| How they connect | You approve permissions on Instagram’s own screen | You give them your username and password, or a session |
| How they send | Through Instagram’s messaging API, inside its published rules | By driving the app or website as if they were you |
| What you can revoke | Access, any time, from Instagram | Only by changing your password |
| Who sets the limits | Instagram, and they are written down | Nobody. The tool guesses, and you carry the risk |
| Risk to your account | Lower. Not zero, because rules can still be broken | High. This is the behaviour Instagram’s systems look for |
You can read how Meta describes the official route in its Instagram Platform documentation, which covers private replies to comments. Our own account of the same rules is in Limits and windows.
What “Meta-approved” does and doesn’t mean
You will see tools call themselves “Meta-approved” or “Instagram-approved.” Treat the phrase carefully. We are not aware of an official public list of approved tools that you can check. What actually exists is a permission system: an app asks Instagram for specific permissions, you approve them on Instagram’s screen, and Instagram only lets the app do what those permissions cover.
So instead of a badge, check the behaviour. A tool that is working inside the official system will:
- Send you to Instagram to approve it. You sign in on Instagram’s own page and see a list of permissions. Dartzo asks for three: basic profile access, managing messages, and managing comments. You can see them in Connecting your Instagram account.
- Never ask for your password. Not in a form, not in a chat, not in a “verification” step.
- Work only on a Business or Creator account. The official messaging tools don’t exist on Personal accounts. If a tool says it works on Personal, ask how. See Instagram account requirements.
- State Instagram’s limits plainly. One private reply per comment, a 7-day window for comments, 24 hours for stories and DMs. A tool that promises “unlimited DMs, instantly” is promising something Instagram doesn’t allow.
What Instagram lets an automation do
The official route is narrow on purpose. It lets a business reply to people who reached out. It doesn’t let it broadcast to the world.
| Allowed | Not allowed |
|---|---|
| Reply to someone who commented, once, within 7 days | Message commenters twice, or after the window |
| Reply to a story reply, a story mention or a DM within 24 hours | Cold-message followers or strangers |
| Answer with text, links and up to 3 buttons | Send anything that ignores message size limits |
| Pace messages inside the published hourly cap | Send at unlimited speed |
| Run on a Business or Creator account | Run on a Personal account |
The numbers behind that table are in Instagram DM limits per day and per hour. One of them is worth repeating here: Instagram’s documented cap for private replies to comments is 750 per hour per account, and Dartzo deliberately starts below it.
Red flags in a tool
- It asks for your Instagram password, or for a “session ID” or cookie.
- It promises to DM your followers, people who viewed your Reel, or people who visit your profile. Instagram doesn’t offer any of those, so the tool is doing something unofficial. See Can you auto-DM new followers on Instagram?
- It says “unlimited,” “guaranteed,” or “100% delivery.” Delivery depends on things no tool controls: blocks, deleted comments, closed windows.
- It sends in bursts at the maximum pace, or has no concept of a queue.
- You can’t see what happened to each message. If a DM didn’t arrive, you should be able to find out why.
- It claims to run alongside another comment-to-DM tool on the same account. Because Instagram allows one private reply per comment, two tools on the same account lose messages to each other. See Another tool is replying.
Even official tools can get you in trouble
Using the official route reduces the risk, but it doesn’t remove it. How you use it still matters. Four habits keep an account healthy:
- Don’t spamSend people what they asked for. A DM that answers a comment is welcome, and a DM that sells to everyone is not.
- Respect the paceDon’t look for ways to send at the cap. Dartzo starts accounts at 200 an hour, halves the pace on any throttling signal, and earns speed back over clean days.
- Vary your public repliesTwo hundred identical “Check your DMs” comments look automated. Rotate a few wordings. See Reply publicly under the comment.
- Keep it to one toolRun a single comment-to-DM tool per account.
Dartzo adds protections that are our own, not Instagram’s: one DM per person per automation in 24 hours, the same message to one person at most 3 times an hour, and an automatic pause if the same message loops more than 10 times in an hour. Nobody can promise an account will never be restricted. What we can promise is that we stay well inside the published rules and that we tell you what happened to every message. See How delivery works.
How to check a tool in five minutes
- Look at the connect stepDoes it send you to Instagram’s own permission screen? If it asks for a password, stop.
- Read the permissionsThey should be about messages and comments, and nothing that sounds like full control of the account.
- Find the limits pageA trustworthy tool publishes its limits. Ours is Limits and windows.
- Test with a second accountComment your keyword from another account and see what arrives and how fast.
- Find the logCan you see, for one person, whether the DM was sent, queued, expired or failed, and why?
Walkthrough: connecting Dartzo the official way
Open Dartzo and press Connect Instagram. You land on Instagram’s own screen, which lists what you are approving. You approve there, you are returned to your dashboard, and Dartzo never sees your password. You can revoke access at any time from Instagram’s settings, and disconnecting stops everything (see Reconnect Instagram if access ever needs renewing). Dartzo can’t publish posts for you. It can send DMs, and post a public comment reply only if you turn that on.
From there, follow Build your first automation. If a connect attempt fails, Can’t connect Instagram is the first place to look. There is a free plan, and pricing lists what each plan adds.