Instagram

Instagram comment automation: the complete 2026 guide

How comment-to-DM actually works, how to write the caption and pick the keyword, how Reels, carousels and Live differ, every platform limit quoted from Meta's own documentation with the date checked, the five mistakes that kill results, and what to do when it stops working.

Someone comments "PRICE" on your reel and gets a DM with your price list eight seconds later. That is comment automation, and it is the highest-leverage thing available on Instagram, because it is the only way a business is allowed to start a conversation at all.

This is the whole subject: how it works, how to write the caption and choose the keyword, how the formats differ, every limit with its source, the mistakes that quietly kill results, and what to do when it stops.

Every platform figure here was read from Meta's own documentation on 2 August 2026, with the page linked. Meta changes these without announcement, so the date is part of the number.

What is Instagram comment automation?

Instagram comment automation watches your posts for a comment, and responds in two places at once: a public reply under the comment, and a private direct message to the person who left it.

Both come from Meta's official Instagram API. The tool never signs in as you and never sees your password.

The two-part answer is the bit most explanations skip, and the halves do completely different jobs:

  • The public reply is visible to everyone. It adds to the post's comment count, which is a distribution signal, and it shows other readers that you answer people.
  • The private reply goes to their inbox. It is the only way a business is permitted to open a DM conversation on Instagram.

You can send one, the other, or both. Almost every good setup sends both. What the public half should actually say is its own question, and a rotating emoji is close to the worst answer available: should you reply to every Instagram comment works through what the reply is really for.

Why this exists at all

Worth understanding early, because it explains every constraint further down.

Meta's messaging documentation is explicit:

Conversations only begin when an Instagram user sends a message to your app user through your app user's Instagram Feed, posts, story mentions, and other channels.

A business cannot message a follower. Cannot message someone who liked a post. There is no broadcast. The customer always goes first.

There is exactly one narrow exception: when somebody comments on your post, you may send them one private reply. That is not you initiating; Meta treats the comment as the opening.

So comment-to-DM is not a growth hack somebody discovered. It is the only door, which is why an entire industry was built on it.

How does Instagram comment automation work?

Six steps, all inside a few seconds:

  1. You connect your Instagram professional account to a tool, on Instagram's own login screen.
  2. You create a rule: which posts to watch, which keyword to look for.
  3. Someone comments the keyword on a post the rule covers.
  4. Meta sends a webhook to the tool, telling it a comment happened.
  5. The tool replies publicly, usually rotating between a few variants so the same sentence is not posted repeatedly under every comment.
  6. The tool sends the private DM with whatever you promised: a link, a price list, a guide, or a question.

Step 4 is where the whole thing lives or dies. Everything is triggered by that webhook. If it does not arrive, nothing happens and no error appears anywhere.

What do you need to set it up?

Three things, and only the first is a decision:

Requirement Detail
A professional account Business or Creator. Instagram's messaging API does not work on a personal account at all. Switching is free and takes a minute in settings.
A tool with official API access An approved Meta app. You will know, because you authorise it on Instagram's own screen and it never asks for your password.
Nothing else No Facebook Page is required for the Instagram Login flow, no ad account, no verification.

If anything asks for your Instagram password, stop. That is browser automation pretending to be you, and it is the real cause of the restrictions people blame on "automation".

Writing the caption that earns the comment

The automation is the easy half. Getting the comment is the half that decides your results, and it is almost entirely the caption.

Four things that move it:

Ask for one specific word, in capitals. "Comment PRICE" outperforms "comment below if interested" by a wide margin, because it removes the decision about what to write. Capitals also make it obvious it is an instruction rather than a sentence.

Say what they get, precisely. "Comment PRICE and I'll send the full price list" beats "comment PRICE for more info". Vagueness is the commonest reason a good hook produces few comments: nobody comments to receive "more info".

Put the instruction twice. Once in the video or on the image, once in the caption's first line. Instagram truncates captions, so an instruction in paragraph three is invisible to most viewers.

Do not make them follow first, in the caption. If you want a follow gate, let the automation handle it (see below). Putting two conditions in the ask, follow and comment, measurably reduces both.

Choosing your keyword

This is where most setups quietly break, and it is worth more care than it usually gets.

One word beats a phrase. Every extra word is a chance to typo, and a typo means no match.

Pick a word that cannot appear by accident. This is the important one. If your tool matches whole words, price will not fire on "surprise". If it matches substrings, it will, and you will be sending price lists to people who wrote "what a surprise". Find out which your tool does before you launch, because the two failure modes look identical from the outside.

Do not use a word that appears in your own caption's normal prose. If the caption says "the price of this course", people replying "the price?" match, people replying "how much?" do not, and your keyword is doing something you did not intend.

Avoid words with common misspellings. GUIDE is safer than RECIEPT. Consider adding the misspellings you expect as extra keywords rather than hoping.

Keep it short and typeable on a phone. Under seven characters is a reasonable rule.

Words that work well in practice, because they are short, unambiguous and rarely appear by accident: PRICE, GUIDE, LINK, BOOK, PLAN, START, SEND.

Blanket auto-DM or keyword-triggered?

Two modes, and the choice matters more than people expect.

Keyword-triggered fires only when the comment contains your word. Use it when you are delivering something specific, when you want the comment itself to be a qualifying signal, or when the post has a clear call to action.

Blanket, meaning any comment triggers a DM, fires on everything. Use it sparingly. It is genuinely useful on a post where every commenter is a plausible lead, for example a launch announcement, but it also DMs people who wrote "🔥" and had no intention of starting a conversation.

The hidden cost of blanket mode is your 750 per hour budget, and the fact that each person's one private reply is spent whether or not they wanted it. On a post that performs, blanket mode can burn the allowance on people who were only being nice, leaving nothing for the ones who asked a real question.

Default to keyword-triggered. Reach for blanket only when you have thought about what happens if the post does ten times its usual numbers.

Multiple keywords on one post

An underused idea: one post can carry several keywords, each opening a different door.

Comment PRICE for the price list
Comment DEMO to book a call
Comment GUIDE for the free PDF

Three keywords, three different DMs, three different follow-ups, one post. The comment now tells you not just that someone is interested but what they are interested in, which is qualification you did not have to ask for.

This is also the cleanest way to run one post for two audiences, for example HOME and INVESTOR on a property reel, routing to completely different conversations.

One caution: more keywords means more instructions, and instructions compete. Three is about the practical ceiling for a caption. Beyond that, comment rates fall because the ask stopped being simple.

Reels, feed posts, carousels and Live all behave differently

They are not interchangeable, and one of the differences is a hard platform rule rather than a matter of degree.

Reels are where comment automation earns its keeping, because Reels reach people who do not follow you. That is the whole point: a comment from a non-follower is a lead you did not have. Expect the largest volume and the widest spread in comment quality here.

Feed posts reach your existing audience mostly. Comment rates are usually lower but intent is often higher, because the person already knows you.

Carousels behave like feed posts for automation purposes. Worth knowing that people comment after swiping, so the instruction belongs on an early slide as well as in the caption.

Live is the exception, and it is a genuine trap. For a private reply to a comment on a post or reel, you have 7 days. For a comment on a Live, the window is only the duration of the broadcast. Once you end the Live, the comments left during it can no longer receive a private reply at all.

Meta also treats Live private replies under a different rate limit: 100 calls per second, against 750 per hour for posts and reels. Generous per second, but the window closes when you stop streaming, so anything you meant to send has to go out live.

What to send in the DM

The single most common mistake, and the easiest to fix.

Remember the rule: you get one private reply per comment, and then nothing until they respond. If your one message is a link and a full stop, the conversation is over unless they choose to restart it, and most will not.

Compare:

"Here's the guide 📄 [link]"

That is a delivery. It closes the door behind itself.

"Here's the guide 📄 [link]

Out of interest, are you doing this for yourself or for clients?"

That is a conversation. The moment they answer, the standard 24-hour window opens and you can talk normally, ask qualifying questions, send a booking link, and behave like a business rather than a vending machine.

The question does not have to be clever. It has to be answerable in three words. "For yourself or for clients?" and "Which city are you in?" both work. "What are your goals?" does not, because it feels like work.

Two mechanical constraints on the message itself, both from Meta's documentation:

  • 1000 bytes of UTF-8, not 1000 characters. Plain English is roughly one byte per character, an emoji costs four, and most Indian language characters cost about three. A message in Hindi or Telugu hits the cap at roughly a third of the character count you would expect.
  • Buttons: real tappable link buttons come from a generic template, capped at 3 per card with 20 characters per label. Quick replies are a different thing, capped at 13, and they disappear the moment the person starts typing.

The follow gate

You can require someone to follow you before the automation sends what they asked for. Everyone else gets a message inviting them to follow and comment again.

This works, and it is the one honest way to turn engagement into followers, because the person is choosing an exchange rather than being tricked into one.

Two things to weigh. It reduces delivery, because some people will not follow, so a follow gate trades volume for followers and you should decide which you actually want on that post. And it works best when the thing behind the gate is genuinely worth a follow. Gating a link that anyone could find in your bio annoys people.

Put the gate in the automation, not in the caption. Asking for a follow and a comment in the same breath depresses both.

What people actually use it for

Five patterns, in rough order of how often they earn their keep:

1. Lead magnets. Comment a word, receive a guide, checklist, template or price list. The workhorse. Works because the value is visible before the person commits anything.

2. Bookings and consultations. Comment a word, receive a booking link. Strongest for coaches, clinics, salons, agencies and property, where the sale needs a conversation anyway. This is the one where the follow-up question in the DM matters most.

3. Launches and restocks. Comment a word to get the link the moment it opens. Doubles as a waiting list, since the comments themselves are the audience.

4. Giveaways and contests. Comment to enter, receive confirmation. Be careful here: giveaway comments are the lowest-intent traffic you will ever collect, and they will inflate your DM count without producing customers. Worth doing for reach, not for revenue.

5. Answering the same question forever. If eighty people a month ask your price under your posts, a keyword answers all of them in seconds and stops you typing it eighty times.

Is Instagram comment automation free?

Genuinely free plans exist, and they are real rather than trials. The pattern across the market is the same: a monthly cap on DMs sent, usually in the low hundreds, with the features unrestricted.

Two things worth understanding about why free is possible at all:

Instagram messaging costs the tool nothing. Unlike WhatsApp, where Meta bills per 24-hour conversation, Instagram messaging has no per-message charge. A free tier costs a vendor server time and nothing else, which is why so many exist.

What free plans usually restrict is not the automation but everything around it: one automation instead of many, one Instagram account instead of several, a "sent via" badge on your DMs, and no analytics.

Kredoo's free plan is 200 DMs a month, no card, and the cap is on DMs rather than contacts, deliberately: a plan counted in contacts gets more expensive the better your content does, which punishes the thing you are trying to achieve.

When comparing free plans, ask what happens at the cap. Some tools queue and resume next month. Some stop silently. That difference is invisible until the month you need it.

Can I build it myself with n8n or Make?

Yes, and ready-made templates exist for both. Whether you should depends on something other than difficulty.

The sending is the easy part. What you are actually taking on:

  • Token refresh. Instagram access tokens expire in about 60 days. Miss it and everything stops with no warning. The commonest cause of a self-built setup dying quietly.
  • Deduplication. Meta can deliver the same webhook more than once. Without a guard you will DM the same person twice, which looks worse than not replying.
  • The one-reply rule. You have to track who you have already privately replied to per comment, because Meta permits exactly one and a retry is wasted.
  • Rate limiting. 750 private replies per hour. Your workflow needs to queue past that rather than fire and fail.
  • The self-comment guard. Without it, your own replies trigger your own automation and it talks to itself.

None of that is hard. All of it is maintenance, and it fails silently, so you find out from a customer rather than from an alert.

Build it yourself if the automation is the whole job: one keyword, one link, and you enjoy owning it.

Do not, if the DM is the beginning of a sale rather than the end. A workflow can send a message. It has nowhere to keep the person, no stage, no follow-up date and no memory of the conversation, which is the argument in an Instagram DM tool is not a CRM.

What are the limits?

Here is every published figure, with its source. This section exists because the numbers circulating in other guides disagree with each other, and some are wrong.

Operation Meta's stated limit Per
Private reply, comment on a post or reel 750 per hour Instagram professional account
Private reply, comment on a Live 100 calls per second Instagram professional account
Send API, text, links, reactions, stickers 100 calls per second Instagram professional account
Send API, audio or video 10 calls per second Instagram professional account
Conversations API (reading threads) 2 calls per second Instagram professional account
Platform calls, everything non-messaging 4800 × impressions per 24 hours Instagram professional account

Source: Graph API rate limiting, Instagram sections, read 2 August 2026.

For comment automation, 750 per hour is the number that binds you, because a comment-to-DM is a private reply. The per-second Send API figures apply to the conversation after the person has replied.

A correction worth making

You will see "200 per hour" quoted as the comment automation cap, including in guides that currently rank for this term. It is not in Meta's documentation. Neither is the "5,000 DMs per hour" figure that circulates elsewhere.

Two hundred an hour may well be a particular tool's own internal throttle, which is a meaningful difference: one is Meta's rule and applies to everyone, the other is a vendor's choice and applies only to their customers. If a tool quotes you a limit, ask which of the six rows above it refers to.

The window

24 hours to respond to a message, restarting each time the person writes again. Meta states it plainly:

Your app has 24 hours to respond to any message sent from an Instagram user to your app user.

There is a human agent tag that extends this to seven days for a reply typed by a person. Meta's documentation describes it without mentioning approval. In practice, using it returns a 403 saying the capability must be reviewed and approved by Facebook first. We know because we tried it on a live account. So when a tool advertises a seven-day window, the accurate version is "seven days once Meta approves the app, twenty-four hours until then".

The rule underneath everything

One private reply per comment. Ever. Within 7 days for posts and reels, within the broadcast for Live.

Two consequences people meet late:

  1. You cannot follow up in the DM until they reply. Your one message carries the whole load.
  2. Fixing a broken automation cannot rescue old comments. If your rule was misconfigured on Monday and you fix it Wednesday, Monday's commenters are spent. The rule does not care that it was your fault.

Media limits

Limit Value
Message text 1000 bytes, UTF-8
Images per message 10
Image file size 8 MB
Audio, video, file size 25 MB
Image formats png, jpeg
Video formats mp4, ogg, avi, mov, webm
Documents pdf only

Source: Instagram messaging API, read 2 August 2026.

The mistakes that kill results

Six, and the first two account for most disappointment.

1. The DM asks for nothing. Covered above and worth repeating, because it is the single biggest lever. A link with a full stop ends the conversation.

2. The keyword is too broad. A substring match on price firing on "surprise", or a keyword that appears in your own caption. Both produce DMs to people who did not ask, which trains your audience to ignore you.

3. No plan for a post that performs. Everything is fine at 50 comments and breaks at 900. Find out whether your tool queues past 750 an hour or discards the overflow, because discarding is common and rarely disclosed.

4. Treating the DM as the finish line. The automation reports "300 sent" and looks like a success. What happened to the 300 is a separate question that nothing in a DM tool answers. It is also the usual reason an audience that watches everything still does not buy.

5. Assuming a keyword re-triggers. It does not. Same person, same comment, one reply, forever. This catches almost everyone during testing, when the automation "stops working" after the first try.

6. Testing from your own account. Every serious tool refuses to DM the account owner, deliberately, so your own replies do not trigger your own automation. Testing this way does nothing, and it looks exactly like a broken setup.

When it stops working

In rough order of how often each actually happens:

  1. You commented on your own post. See mistake six. Test from a genuinely separate account.
  2. That person already used their one private reply on that comment.
  3. The keyword did not match, usually whole-word versus substring, or punctuation.
  4. The rule is not watching that post. A post published after you created the rule is often not included.
  5. The token expired. The tell is that everything stopped at once, on every post, on the same day. A configuration mistake affects one rule; an expired token affects all of them simultaneously.
  6. You hit 750 an hour. The tell is that it worked for the first wave and stopped mid-way through your best-performing post.
  7. Meta restricted the account's messaging. Sends fail across the board with a working token and no config change. Stop the automations rather than retrying, because sustained failed sending during a restriction extends it.

Full diagnosis, ordered by frequency with the symptom that identifies each, is in Instagram comment-to-DM not working.

Three silent failures nobody reports

A webhook that was never subscribed. Connecting an account and subscribing to its webhook fields are two separate API calls. If the second fails, the tool shows your handle, your avatar and your posts, and receives nothing. Everything looks healthy.

The account is connected to two workspaces. Inbound events go to whichever the lookup returns, usually the newest. Your automations sit in the other one, perfectly configured, receiving nothing.

The comment webhook is not perfectly reliable. In our own production logs we recorded stretches where Meta delivered comment notifications with an empty payload: the notification arrived describing nothing. The comment existed on Instagram. A tool relying purely on webhooks cannot know this happened; one that also polls the comments endpoint will catch it. Worth asking your provider whether they poll as a fallback.

What to measure

Comment automation produces a satisfying number, DMs sent, which is the least useful thing it produces. Five worth tracking instead:

  1. Comment rate. Of people who saw the post, how many commented. The only one where the content is the lever.
  2. Delivery rate. Of people who commented the keyword, how many received the DM. Should be near everyone; if not, something is broken rather than underperforming.
  3. Reply rate. Of people who received it, how many wrote back. The one almost nobody measures, usually the weakest, and the cheapest to move, because it depends mostly on whether your message asked a question.
  4. Qualified rate. How many asked a price, requested a call, or showed intent.
  5. Close rate. How many paid.

If you track one, track the reply rate. And note that Instagram Insights cannot report any of stages 3 to 5, because it has never seen your customers. More on that in what conversion rate should you expect from Instagram.

What comment automation cannot do

Worth knowing before you buy anything, because some tools imply otherwise:

  • It cannot DM your followers. A business cannot start a conversation on Instagram.
  • It cannot auto-DM new followers. There is no follower webhook, so no app is ever told the follow happened, and no endpoint returns your follower list.
  • It cannot follow, like or comment on other accounts for you. No API exists for any of it.
  • It cannot tell you a DM was delivered. Instagram has no delivery webhook. A 200 from the Send API means Meta accepted the request, and that is the strongest signal available. Any "delivered" tick you see is inferred.

Evidence for each, from Meta's own documentation, is in what Instagram automation genuinely cannot do.

Is there an app to download?

No, and this is worth being firm about. Every legitimate Instagram comment to DM tool is a website you log into. There is nothing to install.

Searches for an Instagram comment automation download are common, and the software that answers them is almost always browser automation: a desktop app or extension driving your logged-in Instagram session. That is the category that gets accounts restricted, and it is why the download exists at all, because the behaviour it performs has no API and cannot be done from a server.

If a free Instagram comment automation tool asks you to install anything, that is the tell.

Will it get my account banned?

Not if it uses the official API, and this distinction is the whole answer.

Meta built the Instagram Messaging API for exactly this. A tool operating through it works inside Meta's own rate limits and terms, and using it as designed cannot get you restricted.

The horror stories come from the other category: tools that log into your account in a hidden browser and click. Those can auto-follow, auto-like and mass-DM, which is precisely why they can also get your account restricted. They are indistinguishable from a bot because they are one.

Two questions settle it, and neither is technical:

"Which official permissions does your app hold?" They are named things: instagram_business_basic, instagram_business_manage_messages, instagram_business_manage_comments. A legitimate tool can name them.

"Do I log in on Instagram's screen, or give you my password?" Official access never sees your password.

The short version

Comment automation watches a post, replies publicly, and sends one private DM. Official API, professional account, no password, and free plans are real.

Three numbers govern everything: one private reply per comment, 7 days to send it, 750 an hour.

The two things that decide your results are the caption, which determines whether anyone comments, and whether your DM asks a question, which determines whether anyone replies. Everything else is configuration.

If you want to try it, Kredoo's creators plan is free for 200 DMs a month with no card, and a workspace takes about a minute. The difference from a pure DM tool is that the person who commented becomes a contact you own, with a stage and a follow-up date, rather than a thread you scroll past.

Questions people ask

What is Instagram comment automation?

It watches your posts for a keyword in the comments and responds in two places when someone uses it: a public reply under their comment, and one private direct message to that person. It runs on Meta's official Instagram API, so it never needs your Instagram password.

Is Instagram comment automation free?

Genuinely free plans exist across the market, usually capped at a few hundred DMs a month. They are possible because Instagram messaging has no per-message charge from Meta, unlike WhatsApp. Free plans typically limit the number of automations, connected accounts and analytics rather than the automation itself.

How many comment-to-DM messages can I send per hour?

Meta allows 750 private replies per hour per Instagram account for comments on posts and reels. Figures of 200 per hour and 5,000 per hour circulate widely but appear nowhere in Meta's documentation; they are likely individual tools' own throttles rather than platform limits.

Can I send more than one DM to someone who commented?

No. Meta permits exactly one private reply per comment, within 7 days for posts and reels, and only for the duration of the broadcast on a Live. Once the person replies, the standard 24-hour window opens and you can continue normally, which is why a first message ending in a question performs far better than one that only delivers a link.

Do I need a business account for Instagram comment automation?

Yes. Instagram's messaging API does not work on personal accounts at all, so you need a Business or Creator account. Switching is free and takes about a minute, and it is the commonest reason an automation appears correctly configured but never fires.

What keyword should I use for comment-to-DM?

One short word that cannot appear by accident, in capitals, ideally under seven characters. Check whether your tool matches whole words or substrings, because a substring match on "price" will also fire on "surprise". Avoid any word that already appears in the caption's normal prose.

Does comment automation work on Reels and Live videos?

Both, but differently. On a reel or feed post you have 7 days to send the private reply. On a Live, the window is only the duration of the broadcast, so once you stop streaming those comments can no longer receive a DM at all.

Can I use more than one keyword on the same post?

Yes, and it is underused. Different keywords can route to completely different messages and follow-ups, so the comment tells you not just that someone is interested but what in. Three is about the practical ceiling before the caption stops being simple.

Should every comment trigger a DM, or only keyword comments?

Default to keyword-triggered. Blanket mode DMs everyone including people who commented an emoji, and since each person's one permitted private reply is spent either way, a post that performs can burn your hourly allowance on people who were only being polite.

Will Instagram comment automation get my account banned?

Not if it uses the official API, which Meta built for this purpose. Restrictions come from tools that drive a logged-in browser session to follow, like or mass-DM, since none of those actions have an API. Ask whether you authorise the tool on Instagram's own login screen or hand it your password.

Is there an Instagram comment automation app to download?

No. Legitimate tools are websites you log into and authorise through Instagram's own screen, with nothing to install. Software that must be downloaded is usually browser automation driving your logged-in session, which is the category that gets accounts restricted.

Why did my comment automation work once and then stop?

Almost always the one-private-reply-per-comment rule. The same person commenting again on the same post cannot receive another automated DM. Test with a different account or a different post. If it stopped everywhere at once instead, that is an expired access token.

Stop losing leads to the follow-up gap

Kredoo captures leads from Meta and Google Ads, then follows up on WhatsApp automatically. Live in 5 minutes.

Get Started