Instagram and Meta Business Suite isolation

Meta Business Suite is the control plane I actually use for Instagram brand work. Ads, inbox, publishing that exists on web, partner access. I open it in a local profile that holds that entity and nothing else.

The useful caveat: Suite is not a second Instagram identity. It is the official UI on top of assets you already administer. If you were not invited, this page does not apply.

Why Suite lives in its own profile

Suite cookies are work cookies. They sit next to Page access, ad account access, and sometimes pixel helpers. If that profile also holds personal Instagram, a competitor research tab, or a second client's Business Manager, those jobs share a store.

I keep:

• Personal Instagram out of Suite
• Client A Suite out of Client B Suite
• Public research out of both

Instagram business accounts on a local profile is the brand login sibling. This page is the control-plane sibling. Multiple accounts on one PC is the parent split.

MaskWright 0.1 is a local launcher on Windows 10/11. Each profile gets its own user-data-dir. No seats. No cloud copy of the session. profiles.json is encrypted. The Chromium folder is not. Treat the folder as the login.

Official roles, not cookie swaps

A contractor who needs Suite gets a role from Business Manager or Suite settings. They sign in as themselves on their own PC, in their own empty profile. They do not get a Netscape dump.

Instagram cookies and session hygiene is for moving a session you own between machines you control. It is not VA onboarding. Cookie import files in this product are plaintext.

If you need a second authorized entity with the same locale, follow First profile checklist and leave cookies empty. Matching locale is fine. Matching cookies are not.

Scheduling and unofficial helpers

If Meta gave you an official scheduling path inside Suite, use it. If you pay for a scheduler that uses official APIs, that is a vendor you chose. Instagram scheduling without unofficial helpers is the refusal note for tools that want the session instead of a role.

I do not load growth extensions into the Suite profile. Unpacked extensions in MaskWright copy into that profile's tree and launch with --load-extension. A helper that can post is a helper that can leak.

Research stays out

Looking at public Instagram pages, ads libraries, or competitor grids is a different job. I do that in a profile that has never held Suite cookies. Instagram research without mixing jars.

TikTok web is a different product surface. If the same desk also runs TikTok, that is another folder. TikTok web versus the app.

Device signals still exist

A local profile does not erase the Windows box. Instagram and shared device signals still apply. I isolate cookies because cookies are the login. I do not claim the GPU vanished.

Do not paste a mobile user agent onto this desktop profile. There are no cloud phones in MaskWright. Suite on web is a desktop job.

Proxy only if the entity already uses one

Bring your own HTTP or SOCKS5. Language and timezone can follow exit geo on launch. I do not attach Client A's exit to Client B because the form remembered the string.

A household IP is allowed for work you are allowed to do from that house. A proxy is not a second identity.

FAQ

Can I use one Suite profile for two brands I own?

Only if Meta already tied those assets to one login you are supposed to use that way. If they are separate businesses that must not share pixels, use two profiles and two official logins or two roles. I default to two folders.

Does isolation stop a disabled ads account?

No. Spend limits and disabled ad accounts are business facts. A new folder does not restore access. Complete whatever Meta asked, as the owner.

Should I import cookies from my phone?

I do not. Sign in through the official page. Complete 2FA on a device you hold. Phone cookies plus a desktop engine is a mess I will not recommend.

Is Firefox required for Suite?

No. I run Suite on the Chromium profile I already standardized. Firefox/Camoufox exists in the product if you installed that core. Pick one core per profile and keep it.

Open Suite as the role you were given. Keep personal Instagram elsewhere. Invite people. Do not mail the folder.

More how-tos sit under Social media. Compare local versus cloud if you are choosing where that session should live.