Team Inbox for Instagram DMs

An Instagram shared inbox is how more than one person answers DMs without passing around the Instagram password. CommentLink’s inbox is that queue: assignment, internal notes, open/close, full history on the contact. Automation can send the first comment-to-DM. A human takes the awkward ones. If your “team inbox” is still a shared phone, you are one fired intern away from a locked account.

Do not share the Instagram password

Connect the Professional account with Meta OAuth once. Invite people into the workspace with roles. Disconnect from settings if someone leaves. That is the whole security pitch. Browser logins on a shared laptop, “we all know the password,” and session-cookie tools are how accounts get recovered out from under you. Official AutoDM already refused password bots; the inbox should not reintroduce them.

Assign

Unassigned conversations sit in a queue departments can claim. Assign to yourself when you start talking. Unassign when it was a false start. The point is that two salespeople do not send two different discount codes to the same commenter. Role-based permissions and departments exist so support does not need every automation setting, and so a contractor does not see every client if you separate workspaces/accounts — see multi-account automation for several IG logins, not for sharing one password.

Notes

Internal notes are for size, budget, “already refunded,” “this is the angry one.” The customer does not see them. Use notes instead of a side Slack that nobody searches. Do not paste passwords or card numbers into notes; the inbox is not your vault.

Open and close

Open means it still needs a person. Close means the next action is theirs or the job is done. Closing is how a viral Reel does not leave 800 “unread” dots forever. Reopen if they write again. This is not a CRM with fake pipeline percentages; it is a queue.

Where automation stops

Comment-to-DM, Story reply, welcome openers, and keyword DMs handle the repetitive send. Flows can hand off to a human on purpose. You can always type in the thread. After Meta’s standard messaging window, a human send may use Human Agent when that capability is available — that is support escalation, not a second marketing blast. Read how the messaging window affects AutoDM before you schedule clever follow-ups.

First-time DMs still land in Message Requests on their side. Teach the public reply to say so — configure public reply and DM together.

Setup for a small team

1. Connect Instagram with Meta login.
2. Invite the people who actually answer DMs. Give least privilege.
3. Turn on the comment automation for the live post.
4. During a spike, one person owns the unassigned queue; others take assigned threads.
5. Close completed chats. Note anything the next shift needs.

If you also connected WhatsApp, the same assign/notes/close habits apply. The two-channel picture is Instagram and WhatsApp in one shared inbox.

Handoff from automation without a fight

Comment-to-DM should send the link and stop talking if a human has assigned the thread — or the flow should include an explicit handoff node. Two voices in one DM is how you look like a scam. Welcome openers (up to four tappable buttons on Instagram inbox open) can sit in front of a human for people who wrote you cold. They are not a substitute for assignment on a viral Reel.

If a flow keeps sending after the shop owner is mid-refund, that is a configuration error. Pause the automation on that media, or route those keywords to inbox-only. Always-on catch-all plus a team of three is how notes get ignored.

Departments and night shifts

Departments exist so unassigned chats land in a queue the right people can claim. Overnight, close what is done and note what is waiting on a carrier. Morning, do not reopen everything “to be safe.” Message Requests coaching belongs in the public reply on the post, not in a 2 a.m. pile of identical DMs. Configure that pair in public comment reply and private DM together.

Audit log versus Instagram’s activity

The workspace audit log records important changes (who connected a channel, who invited whom). It is not a keystroke log of every DM. Instagram’s own activity tools are separate. If you need to know who typed the refund promise, look at the thread and your staffing roster. Do not promise courtroom-grade forensics this product does not sell.

Shared phone is not an inbox

A WhatsApp Business app on a shared Android, or Instagram logged in on the intern’s laptop, will survive until it does not. OAuth, roles, and a queue survive holidays. If the only “inbox” is Meta Business Suite on one login, you still have a single point of failure — better than a password bot, worse than roles. CommentLink’s inbox is the workspace attached to your automations, not a claim that Business Suite does not exist.

A day in the queue after a Reel

Morning: unassigned filter. Claim anything that is a sale or a complaint. Close the “thanks, got the link” threads. Note the one person waiting on a size restock.

Midday: public replies on the Reel may have told people to check Message Requests. Your job is not to send a second speculative DM. If they write, you are in a normal conversation. If they do not, the link is already there.

Evening: do not leave 200 opens because it feels productive. Close. Hand the restock note to whoever works tomorrow. If WhatsApp is connected, do not mix payment screenshots into the Instagram filter without assigning.

Automation should have been the first DM only, unless a flow is designed to ask a question and wait. If the bot is still pitching while you are refunding, pause the automation on that media. Humans own exceptions. That is the whole inbox thesis.

If you are a team of one, assignment still helps later: when you hire, the history and notes are already on the contact. If you are a team of ten, departments keep contractors out of the wrong brand. Either way, Meta OAuth is the connect path. The Instagram password does not belong in a shared note, a 1Password dump titled “ig,” or a contractor’s personal phone.

What “shared inbox” does not replace

It does not replace Instagram’s Message Requests UI on the commenter’s phone. It does not replace Meta Business Suite if your ads team lives there. It does not replace a CRM. It replaces the shared password. If you still need ads comments handled in Ads Manager, keep that workflow — then answer the DMs here. A shared Instagram password is not a lighter inbox; it is how the account gets recovered out from under the team.

It also does not let you cold-message people who never commented. Official APIs still need an interaction. Assignment is internal. Notes are internal. Open/close is internal. The customer sees messages. That split is how a team stays professional without looking like five brands in one thread.

FAQ

Can I see who sent a manual reply?

Teammates work inside the shared thread. Important workspace changes also land in an audit log. Do not confuse that with Instagram’s own activity log.

Does assignment send a DM?

No. Assign is internal. The customer sees messages, not your claim button.

Can we use one Instagram app login instead?

You can, and you should not. OAuth plus roles survives staffing changes.

Will automation keep talking after I assign?

You can take over any conversation. Build flows that hand off when a human should own the sale. Don’t run a bot that argues with your own agent.

Is this Meta’s shared inbox in Business Suite?

Business Suite has its own inbox. CommentLink’s is the workspace inbox for IG (+ WA if connected) with your automations attached.

What happens if two people click assign?

Treat the thread as owned by whoever the workspace shows as assigned. Talk in notes, not in a second IG login. If you still share the Instagram password, you have not implemented this article.

Can a contractor see every client?

Not if you use roles, departments, and separate connections the way an agency should. Least privilege is the point. Multi-account setup is a different article; inbox permissions are how you avoid the intern dumping a list.

Should automation keep sending after a human is in the thread?

Usually no. Take over, or build an explicit handoff. A bot that argues with your refund message is worse than no automation.

Is a shared phone plus Business Suite enough?

For a team of one, maybe. The moment a second person answers DMs, Meta OAuth plus assignment beats a shared Instagram password. Notes and close are how the next shift knows what happened. Automation should send the first comment-to-DM, then get out of the human’s way. Close finished threads so the queue stays honest.

Related reading

• IG + WhatsApp shared inbox
• Instagram DM automation
• Inbox and team features
• Team and security FAQs