FollowAudit

---

FollowAudit runs entirely inside your browser. On Instagram it scans both sides of your connections and offers an explicit, rate-aware review flow for account actions. On TikTok it reads the follower and following JSON files from your official data export, compares them locally, and keeps all account changes manual.

No account data is sent to a project server. Session credentials are read only when a request needs them and are never stored.

[!CAUTION] Instagram support relies on private web endpoints. They can change without notice, and high-volume account actions may trigger platform limits. TikTok support is read-only and uses only files you explicitly select. This project is not affiliated with or endorsed by Instagram, Meta, TikTok, or ByteDance.

Features

Capability	Behavior
One two-sided audit	A single audit loads Following and Followers once each, page by page, deduplicates, and matches every relationship locally.
Report-first side panel	Docks to the right of Instagram or TikTok and opens as an account report: both counts on one axis, mutuals, and ranked segments that open their lists.
Who unfollowed you	Each followers audit is compared with the previous snapshot stored in this browser, listing new followers and accounts that left.
Focused segments	Don’t follow you back, you don’t follow back, unfollowed you, protected, everyone you follow, everyone who follows you — with instant search (press /, Esc to go back).
Protected accounts	Stored locally and permanently excluded from action queues. Export and import the list as a JSON backup.
Safe action queue	Instagram unfollows and follower removals run one at a time after confirmation, with configurable pauses, a time-left estimate, and an automatic stop on rate limits, refusals, or repeated failures.
TikTok, read-only	Imports the official Follower.json / Following.json export and offers a guided, one-profile-at-a-time manual review.
Minimize	Collapse the panel into a small pill and keep browsing while an audit or queue runs.
Portable results	Exports the current view as spreadsheet-safe CSV.
Five languages	English, Português, Español, Français, Deutsch, plus light and dark themes.

FAQ

How do I see who doesn't follow me back on Instagram?

Copy the script from the website, open instagram.com on a computer while logged in, paste it into the browser console and press Enter. One audit loads who you follow and who follows you, then lists every account that doesn't follow you back. Nothing changes on your account until you confirm.

Can I see who unfollowed me on Instagram?

Instagram doesn't show this itself. FollowAudit saves your follower list in your browser after each audit and compares the next audit against it, so the first audit has nothing to compare with and every later one lists who left and who is new.

Does it need my password or an app?

No. It runs in the Instagram tab you already have open and uses that session. There is no app, extension, login, server or analytics.

Does it work on TikTok?

Yes, read-only: import Follower.json and Following.json from your official TikTok data export, compare them locally and review each profile manually.

Can I get banned for using it?

No tool can promise that, and Instagram's terms restrict automated access, so use it at your own risk. FollowAudit is built to be gentle: lists are read page by page, unfollows run one at a time with pauses, are never retried and stop as soon as Instagram pushes back.

Safety by construction

The destructive path is intentionally slower than the review path:

• unfollow and follower-removal requests are never retried automatically;
• every run requires an explicit confirmation listing the selected accounts;
• protected accounts cannot be selected;
• the queue is sequential, cancellable, and delay-controlled;
• the queue stops itself when Instagram answers with a rate limit, a challenge, or an HTTP 200 refusal body, and after three consecutive failures;
• malformed API payloads fail closed instead of reaching the interface;
• exported CSV cells are escaped against spreadsheet formula injection;
• cookies and CSRF tokens never enter storage, exports, logs, or application state.

Quick start

1. Open the FollowAudit website and select Copy script.
2. Open Instagram or TikTok in a desktop browser.
3. Open Developer Tools (F12, or Cmd+Option+J on macOS), switch to Console, paste the script, and press Enter. Chrome may ask you to type allow pasting the first time.
4. On Instagram, choose a list and run the audit. On TikTok, import the extracted Follower.json and Following.json files from Settings and privacy → Account → Download your data (request JSON format).

Running the script again restores a minimized panel instead of opening a second one. The bundle refuses to start outside instagram.com or tiktok.com, except on localhost where it enters preview mode; add ?platform=tiktok to inspect the TikTok state.

How it works

flowchart LR
    A{Platform} -->|Instagram| B[Authenticated paginated scan]
    A -->|TikTok| C[Official JSON export]
    B --> D[Runtime payload validation]
    C --> D
    D --> E[Local review workspace]
    D --> S[(Follower snapshot)] --> E
    E --> F{User decision}
    F -->|Protect| G[Local protected IDs]
    F -->|Export| H[CSV file]
    F -->|Instagram confirmation| I[Sequential, self-halting queue]
    F -->|TikTok| J[Guided manual profile review]

This is the beginning of the README. Read the rest at the original. Read the full README ↗