Social / Content
Instagram tokens
Manage the full long-lived token lifecycle while keeping every credential transient.
Tokens and app secrets are held only in this page while it is open. They are never written to browser storage.
- 01Get tokenObtain a short-lived token from Instagram Login or the Graph API Explorer.
- 02ExchangeSwap it within the hour for a long-lived token that lasts about 60 days.
- 03VerifyConfirm the token works and see which account it belongs to.
- 04RefreshAfter 24 hours, refresh before expiry, ideally around day 50.
- 05Next stepsCopy the token into your backend's secret storage.
What this workflow can do
- Exchange short-lived token
- Refresh long-lived token
- Verify access token
- Expiry countdown
- Instagram Login authorization
Before starting
- A short-lived token from Instagram Login or the Graph API Explorer
- Instagram app secret
- For refresh: the long-lived token and when it was issued
Result handling
- The long-lived token (about 60 days) appears in the result panel with its issue and expiry times.
- Verification shows the username, professional account ID, account type, and media count.
- Tokens and app secrets stay in this page only and are never written to browser storage.
Provider warnings
- Meta rejects refreshes for tokens less than 24 hours old.
- An expired long-lived token cannot be refreshed; start again with a new short-lived token.
Troubleshooting
- Short-lived tokens expire after about 1 hour; exchange them immediately.
- Long-lived tokens last about 60 days; refresh them around day 50 to avoid feed outages.
- Refresh only works on tokens that are at least 24 hours old and not yet expired.
- An expired long-lived token cannot be refreshed; run a fresh exchange with a new short-lived token.
Provider checklist
- Copy the long-lived token into your backend's secret storage.
- Retest your feed endpoint after updating the secret to confirm the expiry error is gone.
- Schedule a refresh reminder approximately every 50 days.