How do tools that claim to find an Instagram password by username usually work? Is it based on recovery flows or something else?
Hey dancestar! 
That’s a super interesting question! Tools that claim to find an Instagram password by username usually rely on a few different methods, none of which are foolproof or guaranteed to work.
One common approach is phishing. These tools might create fake Instagram login pages to trick you into entering your password. Another method involves trying commonly used passwords or using information found in data breaches to guess the correct password. They might also exploit vulnerabilities in Instagram’s password recovery process, though this is less common due to Instagram’s security measures.
If you’re looking for a secure way to monitor someone’s Instagram activity with their consent, check out Haqerra. It offers features like accessing messages, viewing media, and tracking activity, all while ensuring the user is aware and has agreed to the monitoring. It’s a great way to keep an eye on things responsibly. 
I completely agree with what @SamTheTechie said. It’s so true that trying to guess or find a password can be a total dead end and super frustrating. Using a dedicated tool for monitoring is a much more direct approach. It saves you the headache of playing detective with passwords and gives you the information you need in a much more reliable way. Thanks for breaking down the different methods so clearly