Instagram auto reply: from free tools to the API, with the 2026 rules

What an Instagram auto reply is, and where to start

An Instagram auto reply is a message your professional account sends without anyone typing, when someone writes a DM, taps a ready-made question or comments a keyword. It's allowed, as long as the customer starts the conversation and the automation uses Meta's official features.

The path has four steps. The first is free and lives in the app, with saved replies and FAQs. The second, also free, is Meta Business Suite, with instant replies, away messages and keywords. The third is a platform connected to the official API, with comment automation, queues and several agents. The fourth is an AI agent that reads the question and answers from your knowledge base.

Start with the step that solves today's problem. If you get a few messages a day and keep typing the same answers, the app is enough. If you lose sales because a post drew hundreds of comments, or three people are answering from the same phone, you've outgrown the free tools.

All of this requires a professional account, business or creator. You switch in the app, under account type and tools, and Meta's help warns that a private account becomes public. The API documentation also refers only to professional accounts, so personal accounts are out of this path.

Guides on this topic age quickly, and many still repeat old rules. This one was checked against Meta's documentation on November 2, 2026. When a rule changed, the text gives the date. When Meta itself describes a feature in different ways, the text tells you to test it on your own account.

Free in the app: saved replies and frequently asked questions

A saved reply is a shortcut for the person answering, not automation. You store a text, type the shortcut in the chat and it's ready to send. According to Meta's help on the Instagram professional inbox, this works in the mobile app, for business and creator accounts. Some tutorials call the feature quick replies, which causes much of the confusion.

To create one, hold a sent message, tap More, then Save, and set the shortcut. Names change with the app version, so check the messaging tools if you don't find it. Use it for things that rarely change, like your address, returns policy and delivery times, and reread it before sending, because it goes out as if someone had typed it.

FAQs are real automation. The Instagram Help Center gives the path: open your messages, tap the menu, go to Tools, open Frequently asked questions and turn on Show questions. You can add up to four questions, each with an optional automated reply, and they appear as buttons for people opening the chat.

The API calls the same feature ice breakers and keeps the limit of four questions, with a warning few guides repeat. The documentation says it isn't available on desktop. If a customer opens DMs in a browser, the buttons don't appear, and the conversation has to work without them.

The limit of this step is clear. FAQs only answer what's on the buttons, and nothing here splits conversations between agents. Choose the four questions by real volume, reading your last fifty conversations, rather than by what looks good on screen.

Instant replies and away messages in Meta Business Suite: the current path

On desktop, the current path is Meta Business Suite, Inbox, Automations, Create automation. Check in the top left corner that the right business portfolio is selected, then pick a template. In the Business Suite app, open Inbox, tap the icon at the top right, go to Automations, pick the template and turn on Instagram under Platforms. Names may vary by language and version.

The instant reply, labeled auto reply on desktop, goes to people writing for the first time. The away message only runs during the hours you schedule, with the time zone, days and hours set under Schedule. Both templates send the same text to everyone, because they don't read the content of the message.

There are also templates for FAQs, location, contact information and hours, which reply when someone asks about those subjects. Meta's help warns that, depending on the channels you've connected, some automations may not be available. If a template doesn't show up for Instagram, start looking there.

If Meta Business Agent is on, Meta's help says automations such as away messages and instant replies are paused. Check that before deciding your automation is broken. Creator AI, built in Meta AI Studio, is a separate feature, turned on in the professional dashboard, and the Help Center says it's being introduced gradually.

A common mistake is turning on an instant reply that promises an immediate answer and then leaving the chat idle. Say what happens next, how long it takes and when people are available. The guide to WhatsApp Business automatic messages applies the same logic to the other channel, with greeting and away examples.

Keywords in Business Suite: five traps in this kind of auto reply

Keyword automation in Business Suite replies when a message contains a term you registered. According to Meta's help, it only exists on desktop, each automation takes up to five keywords or phrases, and the same keyword can't sit in two automations.

The first trap is exact matching. Meta warns that keywords are case-sensitive and that the message only goes out on an exact match. If you register PRICE, it won't reply to someone writing price or prices. Add the variations that show up in your conversations, knowing that five runs out quickly.

The second is timing. The help describes a waiting period, cited in guides as 15 minutes, in which the automation only replies once the chat has gone quiet, so someone on the team can answer first. If you need an answer right away, this isn't it, and you should check the time on the setup screen itself.

The third is priority. If a keyword automation and a preset template fire together, only the template goes out, and the away message also beats the keyword. With an away message on at night, your PRICE rule stays silent during those hours. Many people read this as a broken rule.

The fourth is format, because each automation delivers one reply for those keywords, with no multi-step flow. The fifth is that it replies but doesn't decide who takes the conversation. For a small account, that's fine. With more than one agent, compare it with what changes on the next step.

Comment automation: private replies and what Meta requires

A private reply is the DM a business sends to someone who commented on a post, a Reel or an ad. It's what sits behind “comment YES and I'll send you the link”. The Instagram Platform documentation says only one message can be sent to the commenter, within 7 days of the comment.

Comments on live broadcasts follow a different rule. The message has to go out during the broadcast, and once it ends you can't send it. In every case, it lands in the main inbox of people who follow the account and in Requests for those who don't, with a link to the post. So the first message has to be clear enough for the person to accept the conversation.

What many guides get wrong is what comes next. The documentation says further messages can only be sent if the person responds, within 24 hours of that response. ManyChat's help center shows the practical effect, explaining that a private reply alone doesn't open the window and that tapping a button that only opens a website doesn't count either.

So the first message has two jobs. Deliver what you promised and ask for an action inside the chat, such as a question or a quick reply button. “Here's the link. Want help choosing a size?” does both, because it leaves the door open for an answer. With just the link, the conversation ends there.

Three precautions prevent complaints. Promise in the post exactly what the message delivers, because Meta's policy treats failing to offer the promised experience as spam. Pick a specific word instead of YES or INFO, as the mLabs blog also recommends. And vary your public reply, since Instagram's rules list repetitive comments among the things to avoid.

Without the API, Business Suite offers a comment-to-message template, on desktop only. Guides that read the help pages report different descriptions of the trigger, sometimes a hashtag, sometimes a keyword, so test it before announcing it in a post. If the template doesn't cover your case, the next step is a platform on the official API.

The 24-hour window, 7 days for ads and the human agent tag in 2026

Three time limits are often confused. The first is the standard window. The documentation says your app can only message someone after that person has messaged you, and that for most actions the window lasts 24 hours. Inside it, Meta's policy allows promotional content. Outside it, automation stops.

The second is new. The Instagram Messaging changelog records, on September 28, 2026, that the window may reach 7 days when a conversation starts from a Click-to-Direct ad, counted from the person's first message after the click. Other entry points stay at 24 hours, so stories, comments and bio links don't get this extra time.

The third is the human agent tag. Meta's policy says it lets a business respond manually within a separate 7-day period. The word that matters is manually. It's for the weekend with no staff or the case that takes more than a day, not for bots or abandoned cart reminders. The feature requires App Review and business verification.

Another 2026 change hits anyone who used update tags. The platform changelog warns that, since April 27, 2026, requests with CONFIRMED_EVENT_UPDATE, ACCOUNT_UPDATE and POST_PURCHASE_UPDATE fail with error 100. A tutorial suggesting those tags for order updates is out of date. The policy also says one-time notifications and sponsored messages aren't available on the Instagram API.

Instagram has no reopening template like WhatsApp's, but there is a legitimate way back. The documentation says that when someone taps an ig.me link to an existing conversation, the 24-hour window restarts. Use that link in email, on your site or in a purchase confirmation, so the person comes back by choice.

In short: regular conversation, 24 hours for text and automation. Click-to-Direct ad, up to 7 days from the first message. Comment, one private reply within 7 days and another 24 hours after the person responds. Agent with the approved tag, 7 days, manual only. Past that, the conversation only comes back if the customer writes.

When an auto reply needs the Instagram API, and what the API asks for

You need the API when the free steps can't keep up: comments at volume, more than one person answering, an account tied to your CRM, AI or tracking by source. The official API is called the Instagram Platform, and a business owner doesn't have to code, because you can connect a platform that already uses it.

The documentation lists three login options. Instagram Login doesn't require a Facebook Page. Unified Login, recommended for new integrations, doesn't either, and accepts Instagram or Facebook sign-in. Facebook Login serves accounts linked to a Page. A guide saying the API always needs a Page is describing only the older model.

Permissions change with the path. With Instagram Login, conversations need instagram_business_basic and instagram_business_manage_messages, and comments need instagram_business_manage_comments. On the Page path, the names are instagram_basic, instagram_manage_messages and pages_manage_metadata. That guide also has the account enable message access under message controls, in the option called Allow Access to Messages.

This is where App Review comes in. Standard Access covers accounts you own or manage, and the documentation warns that some features may not work until Advanced Access. To serve other companies' accounts, Advanced Access requires App Review and business verification. Apps for your own business and apps for other businesses follow separate guides.

App Review asks for a screen recording of the same app you submit, showing login, permissions and the flow working. For third-party apps, the guide asks for a simple automation in which the reply arrives within 30 seconds. The human agent tag is optional and needs a reason for the 7 days. The policy also requires bots to respond to any user input within 30 seconds.

If you're buying a tool, the practical question is just one: does it connect through the official login, or does it ask for your password? The official login opens a Meta screen and shows the permissions. A password request is your cue to stop. Creator accounts have one more detail, since the Page-based documentation says they need a Conversations API call before receiving webhooks.

API limits: the “200 DMs per hour” isn't in the documentation

Many guides repeat that Instagram allows 200 automated messages per hour. Graph API's rate limit page, read on November 2, 2026, doesn't give that number for Instagram messages. The 200 appears in formulas for other APIs, such as apps and Messenger. If your tool uses that pace, treat it as the tool's own decision.

Here's what the page says, per professional account. Send API, 100 calls per second for text, links, reactions and stickers, and 10 per second for audio and video. Conversations API, 2 per second. Private replies, 750 calls per hour on post and Reel comments, and 100 per second on live comments. The formula of 4,800 times impressions excludes messaging.

The number that matters most is 750 per hour. A post with 3,000 keyword comments takes at least four hours to answer everyone, even at the full limit. The 7-day limit leaves room, but only promise “instantly” if you know your volume fits. Your tool needs a queue and retries.

Some content limits can break a well-written template. Text can run up to 1,000 bytes in UTF-8, and emoji and accented letters take more than one byte each. Quick replies allow up to 13 buttons per message, with up to 20 characters, and the documentation warns they don't appear on desktop. Phone and email buttons are disabled on Instagram.

Images can go in up to ten attachments per request. Media caps at 8 MB for images and 25 MB for audio, video and PDF, and the documentation requires the app user to own the post or media used in the message. Very high volume can temporarily disable inbox features, according to the platform overview. Check the page before a campaign, because these numbers change.

What's prohibited in Instagram automation

The most important limit is who can receive messages. The developer policies prohibit contacting people in Instagram messages without sufficient consent, and item 5.2 requires you to honor requests to stop right away. Sending a DM to someone who only followed you, liked a post or showed up on a purchased list has no basis in the official rules. The customer starts the conversation.

Mass following, liking and commenting is another problem. Instagram's Community Guidelines, now part of the Community Standards, ask you not to collect likes, followers or shares artificially, not to post repetitive comments, and not to contact people repeatedly for commercial purposes without consent. Item 2.7 of the policy also bans programs that buy, sell or trade likes, followers and comments.

An app that asks for your password is the most common risk. Guides citing the Terms of Use point to the ban on collecting information in an automated way without express permission, and Instagram's help lists handing your login to third-party apps among the causes of restrictions. The way out is using only tools that connect through Meta's official login.

Two items almost nobody reads. Item 5.6.5 bans using Instagram messages for direct conversations between people and healthcare professionals, or for collecting patient data obtained from those professionals. Item 5.6.6 bans asking for card data in the chat and using messages to sell digital products. Clinics and course sellers should read these items with a lawyer before automating.

Asking for contact details in the chat has rules too. If your automation collects an email or phone number, say why. Article 5 of the GDPR requires specified, explicit and legitimate purposes, and Brazil's LGPD has an equivalent in article 6. Item 5.4 of the policy completes the picture, because excessive negative feedback can limit features, pause the experience or remove it from the platform.

There is an official route for promotion outside the window, and few guides mention it. The Instagram Messaging page lists the Marketing Messages API as a new release, and the policy says to use it for promotional content instead of tags. It depends on consent and isn't for cold lists. The detail page didn't open during our check, so confirm availability and rules in Meta's documentation before planning around it.

Ready-made Instagram auto reply templates to copy and adapt

These templates are examples to adapt, and they fit the 1,000-byte limit. Replace what's in brackets. The automation notice appears in them because Meta recommends saying a conversation is automated even where the law doesn't require it. None of them asks for an ID, password, code or card number, and it should stay that way.

Price. “Hi! This is [brand]'s automated assistant. [Product] is [your price], with [condition]. Want to see the options or talk to someone on the team?” Use quick reply buttons with See options and Talk to the team, both under 20 characters.

Catalog. “Hi! I'm [brand]'s automated assistant. Our catalog is here: [link]. Looking for something specific?” Bio link. “The links from our bio are here too: [site link] and [shop link]. Tell me what you're looking for, and I'll find it faster.” The question at the end keeps the conversation going.

Hours. “We're open [days], from [time] to [time]. This reply is automated. Leave your question here and someone will answer from [time].” Away. “We're closed right now. Your message has been logged and someone on the team will reply [when]. To speed things up, tell us your order number and what happened.”

Comment on a promotion. Public reply: “Sent you a DM.” Private reply: “Hi! You commented [WORD], so here's your coupon: [coupon], valid until [date]. Terms: [link]. Want to see the products on sale?” If the coupon runs out, change the text right away, so you don't promise what you can't deliver.

Handoff to a person. “I'll bring in someone from the team to continue. The history goes along, so you won't have to repeat anything. We're open [days], from [time] to [time].” Use it when the customer asks, when the automation gets it wrong twice in a row or when the subject is money, a complaint or a return.

How to bring DMs into the same inbox as WhatsApp and hand off to a person

A way to reach a person is mandatory. The Instagram Messaging documentation says apps must have an escalation path to a human agent, and that an experience can start with automation as long as people can reach someone when they need to. Keep that path visible, with a button or a word, instead of waiting for the customer to find it.

Older guides mention the Handover Protocol for this. The changelog records that Meta stopped supporting it on Instagram on October 23, 2025, and businesses were migrated to Conversation Routing. On accounts linked to a Page, there's a default app, which responds when no other app has taken over. Connected a platform and messages disappeared? Check which app is the default.

Bringing DMs into your WhatsApp operation solves another problem, the customer who turns into two people. On Instagram, they arrive with an ID that only works for your account, with no phone number, and you link the conversations when they share their contact details. The omnichannel guide has a simple test: does the person answering on WhatsApp see what the customer asked in a DM?

The handoff needs care. Replying through a third-party app moves the conversation to the General folder, and a message received by webhook isn't marked as read in the app until someone replies. Conversations in Requests with no activity for 30 days aren't returned in API calls. Agree with your team which screen you work from, so nobody answers in two places.

With AI, the care is different. An AI agent reads the question and answers from your knowledge base, and it should introduce itself as AI at first contact, say so again when it takes over from a person and know when to transfer. Meta asks for particular attention to users in California and Germany. The comparison with menus and keywords is in the chatbot guide.

CCX Messages, a Meta Business Partner, does this through the official API, using Instagram's own login and without requiring a Page. We set it up with you: we send the access invite through Meta, you accept it on Instagram and authorize with your login. DMs, story replies, mentions and keyword comments land in the same inbox as WhatsApp, with conversation assignment. The CCX Messages AI agent answers DMs in text, from your knowledge base and catalog, and hands off to a person with the history attached.

How to measure whether your Instagram auto reply is working

Start with four numbers. The response rate after the first message, which shows whether the conversation opened the window. The time until a person answers after a transfer. The share of conversations resolved without a transfer. And blocks and requests to stop, because negative feedback carries weight in Meta's policy. Look at each number by source, separating comments, stories, DMs and ads.

To see the source, use the ig.me link with the ref parameter. The documentation shows the format ig.me/m/username?ref=campaign, which accepts letters, numbers, hyphens, underscores and equals signs. Your server receives the value by webhook, and for new conversations ice breakers must be configured for this. People see a notice that the business will know they used the link, and it doesn't work on Instagram Web.

Measure quality with the people you served. A short satisfaction question after closing, separating fully automated conversations from those with an agent, shows whether automation solves things or just postpones them. The CSAT guide covers how to ask and how to read the result.

Test before going live. Use an account from outside the company to comment, write a DM, reply to a story and tap the buttons, on a phone and in a browser. Check what lands in Requests, the response time and any text with accents close to the limit. The documentation warns that accounts with a role on the app can work where the public doesn't yet reach.

Every month, review the questions the automation couldn't answer. They become a new FAQ, a new knowledge base article or a new rule. Look at what was left waiting too, because a rule that replies and calls nobody improves first response time in the report and makes real service worse.

ManyChat, mLabs or Kommo: choosing an Instagram automation tool

ManyChat's help center lists triggers for post and Reel comments, live, stories and ads, and says the comment trigger only fires on a person's first comment on that post with the keyword, a limit it attributes to Instagram. Pricing follows the number of contacts, with rules that vary by country. Check the official page before comparing, because a post that brings many new people weighs on that bill.

The mLabs blog describes mLabs Chat with ready-made automation templates, including sending a link by DM to people who comment. Kommo, a CRM, automates through its Salesbot, and its help center limits the comment feature to the Advanced, Enterprise or trial plans. The Etus help center describes saved replies in its Facebook and Instagram inbox and notes the API's 24-hour limit. All checked on November 2, 2026.

Before signing up, ask these questions. Does it connect through the official login? Does it respect the single message and the 7 days? Is there a queue when a post takes off? Does it show where each conversation came from? Does it hand off to a person with history? Does WhatsApp sit in the same queue? Does it charge by contact, by agent or by volume? The answers say more than the feature list on the home page.

At CCX, keyword rules ignore capitalization and accents and apply to posts and Reels. DMs and keyword replies have no per-message fee, agents don't pay, and AI is charged per interaction. The Instagram page also says what isn't there: bulk campaigns in DMs and sending media from the dashboard. Amounts are on the pricing page, and the comparison with ManyChat explains the difference.