All posts
SafetyMeta PolicyInstagram

The Instagram 24-Hour Messaging Window, Explained Simply (2026)

What the Instagram 24-hour messaging window is, how the 7-day private-reply window fits in, and why these rules mean compliant automation replies but never cold-messages.

The heyy.to team5 min read

The 24-hour messaging window is one of those Meta rules that sounds technical but is actually simple, and once it clicks, a lot of "why can't my tool do X" questions answer themselves. So here it is in plain terms, plus the two other windows that go with it.

The basic idea

When a person sends your Instagram account a message, a clock starts. For the next 24 hours, you can reply with standard messages: text, a link, a follow-up question, an offer. Anything normal. This is the standard messaging window, and it exists so businesses can have real conversations without the platform getting in the way.

When those 24 hours are up, the window closes. After that, you can no longer send whatever you want. You are limited to specific approved message types, and Meta is strict about them.

That is the whole core rule. Someone talks to you, you get a day to talk back freely.

Why the window exists

Meta built the window to draw a hard line between conversation and spam.

If there were no window, a business could message anyone, anytime, forever. That is a spam machine. By tying your ability to send standard messages to a recent message from the user, Meta guarantees that ongoing messaging is something the user actually started and kept alive. The window is the mechanism that makes Instagram a reactive channel instead of a cold-outreach channel.

This is also why no tool can "unlock" cold DMs. It is not a feature Meta forgot to build. The window is the rule, on purpose.

The 7-day private-reply window

There is a second, related window for comments, and it is the one that powers comment-to-DM.

When someone comments on your post or reel, Meta lets you send them one private reply, and you have 7 days from the comment to send it. One message, per comment, ever. Meta clocks the 7 days from when the comment was created, not from when your tool noticed it, which matters for busy automations.

So the compliant "comment LINK and I'll DM you" flow uses this 7-day private-reply window to send the first DM. If the person then replies to that DM, their reply opens the standard 24-hour window, and the conversation can continue normally.

The human-agent extension (and why bots can't use it)

There is one more piece people ask about. Meta offers a human-agent tag that extends the response window from 24 hours to 7 days. It exists for support cases that genuinely take days to resolve, like a refund that needs internal review.

But here is the catch, and it is important: Meta explicitly restricts the human-agent tag to real humans, not automated systems. It is not a loophole for bots to keep messaging for a week. If a tool claims to use it to extend automated sends, that is a misuse of the tag. Compliant automation lives inside the standard windows, not by leaning on a human-only extension.

What this means for your automation

Put the three windows together and the rules of safe automation fall out naturally:

  • You can auto-reply to a comment within 7 days, once. That is the comment-to-DM mechanic.
  • You can auto-reply to a DM within 24 hours of the person's message. That is the story-reply and keyword-DM flow.
  • You cannot start a conversation with someone who never messaged or commented. No window opens for a stranger, so there is nothing to send into.

This is exactly how we built heyy.to. It replies inside these windows and never outside them. It sends the comment reply within the private-reply window, it answers DMs inside the 24-hour window, and because there is no window for a stranger, it simply does not cold-message people. The windows are not a limitation we work around. They are the shape of what is allowed, and staying inside them is what keeps accounts safe.

A worked example

Say you post a reel with "comment GUIDE and I'll DM you."

  • Monday 9:00am: someone comments GUIDE. The 7-day private-reply clock starts.
  • Monday 9:00am, seconds later: heyy.to sends the one private reply with your link. Compliant, inside the 7-day window, one reply for that comment.
  • Monday 9:02am: the person replies "thanks, do you have the video too?" Their reply is a message to you, so the 24-hour standard window opens.
  • Monday 9:02am to Tuesday 9:02am: you can send standard messages freely. heyy.to answers with the video link. If they keep replying, each reply refreshes the window.
  • Wednesday: they have not messaged in over 24 hours. The standard window is closed. You cannot just send a new promo. You would need them to message again to reopen it.

That is the entire lifecycle. Every compliant automation is just software following this timeline.

Common questions

What counts as a message that opens the window? A DM to your account, a story reply, or a reply to one of your messages. A like or a follow does not count, because neither is a message.

Can I send anything after 24 hours? Only specific approved message types, and the human-agent extension is for real humans, not bots. In practice, compliant automation waits for the person to message again rather than trying to send outside the window.

Does the comment reply use the 24-hour window? No, it uses the separate 7-day private-reply window. The 24-hour window only starts once the person actually messages you back.

The one-line version

Someone engages you, a window opens, you get to respond inside it. That is the entire model. Every safe automation is just software that respects those windows, and every risky one is software that tries to pretend they do not exist.

Once you see messaging this way, the "why can't my tool just DM everyone" question dissolves. There is no window for a stranger, so there is nothing compliant to send them. The window is not in your way. It is the thing keeping your account on the right side of the line.

For the full rulebook, read our Instagram automation safety guide.

See how heyy.to works inside Meta's windows →

© 2026 heyy.to. All rights reserved.hello@heyghe.com