So I was logging onto Instagram on a new phone, and I have 2FA enabled. As soon as I logged in, Instagram informed me of a suspicious login from a different location not too far from me. I immediately changed my password and checked security settings on my Instagram, and it shows the only login now is from my current location.
My question: is it possible for a hacker to somehow have seen my password and the numeric code when I logged in?
I was connected to a WiFi at work.
Currently it shows only login from my location so it’s safe, but I am wondering if this is an Instagram glitch or an actual hacker who intercepted my info (if so, how?) The device is a new pixel phone (all updates etc and trusted apps only).