Account session
Uses your browser session cookie — same access as when you are signed in. Highest-quality media candidates are archived automatically.
Mobile API sign-in — username & password via the mobile private API (device IDs). Session stays on this server and is auto-refreshed (no proxy, no browser window).
Wrong password / recovery: the provider may offer a recovery mail.
That mail is not sent by pressing Sign in alone — the portal requests it when offered.
Check inbox + spam. Do not spam sign-in (it blocks mail).
Security check: if you received a “confirm this login” mail, open it → then
I approved email — retry.
Most reliable: sign in on your phone/PC → open Fallback: paste cookies and paste
sessionid.
Password is stored encrypted on the server. Keep-alive refreshes the session automatically. Repeated failed sign-ins suppress recovery mail — wait 15–30 min between attempts.
On your PC (signed in): open DevTools → Network → click any request to the account site →
Headers → copy the whole Cookie: value
(or paste the entire Request Headers block). That is enough — no need to split fields.
Tip: include sessionid, csrftoken, ds_user_id, mid, ig_did.
Optional overrides (usually leave empty)
Server-side browser window (local desktop only)
Only works when the app runs on the same PC you sit at (not IIS).
@user
Session active