Pick an Instagram giveaway winner from your comments

A giveaway is fair when the rules are written down before it starts, applied the same way to everyone, and the winner is picked by chance from the people who met them. Whatever you announce in the caption is what people will hold you to, so settle the details first and then change none of them.

• Rules first: how to enter, who may enter (age, country), the closing time with its time zone, the prize, how many winners there are and how you will tell them.
• The same rules for every comment. Each rule here is applied to all of them, and the counts show how many it removed, so you can explain why someone was out.
• A real chance: one entry per person unless you said otherwise, picked by chance and not by taste. Usernames are matched without regard to capitals, so a hand-typed Maria.K and maria.k count as one person.
• A record you can show: the time, the rules, the number of entries and the winners.
• Alternates, and a deadline for replying. A winner who goes quiet needs replacing, and you should say how long you will wait.

The person running the giveaway is responsible for following Meta’s rules, not this tool and not us. On 7 October 2026 we read Instagram’s Promotion Guidelines. They say that if you use Instagram to run a promotion you are responsible for running it lawfully, including the official rules, the offer terms, eligibility and the rules that apply to the prizes. A promotion must include a release of Instagram and say it is not sponsored, endorsed or administered by Instagram, and you must not tag content inaccurately or encourage others to. Instagram says it will not help you run it.

That page doesn’t mention asking people to tag friends to enter. Meta’s policy for Facebook Pages, which we also read that day, says a promotion must not require or incentivise people to share, repost or tag others. Meta’s Community Standards on spam, a page written for Facebook, list giveaways of cash or cash equivalents in exchange for engagement among the things it does not allow. How these apply to your giveaway is for you to check on the current pages, which can change. This is not legal advice, and laws on prize draws differ from country to country.

Winners come from your browser’s cryptographic random number generator, crypto.getRandomValues, not Math.random. A plain remainder of a random number would slightly favour the first entries whenever the list size doesn’t divide the generator’s range evenly. So numbers from the uneven top slice are thrown away and drawn again, and every entry gets exactly the same chance. Alternates are picked the same way, one at a time, and nobody can be picked twice.

There is no seed, so the pick itself can’t be replayed. The record gives you a fingerprint instead: a SHA-256 hash of the entry list, with the usernames sorted and written one per line. Anyone holding the same list gets the same fingerprint, so you can show which list you drew from without publishing it. To check one yourself on a Mac or Linux machine, save the usernames to a file and run LC_ALL=C sort entries.txt | shasum -a 256.

What it can’t show is that you drew only once. The record counts the draws on the page since you opened it, so a re-draw isn’t hidden, but anyone can reload the page and draw again. For a result people can trust, say beforehand when you will pick, do it live or screen-record it, and publish the record next to the winner’s name.

From a link, it first looks the post up. That costs at most one check, and nothing when the post is already saved. It then tells you how many comments the post has and how many of your free checks reading them will use. Comments arrive 15 to a check, newest first, up to 300. If the post has more, a draw from the link would leave out people who commented earlier, so the tool says so and points you to pasting. Replies under a comment are not read. Only public posts can be read.

Paste mode takes up to about 20,000 comments. It understands text copied from instagram.com, one comment per line as username: comment, and a CSV or spreadsheet with a username column and a comment column. A plain list of usernames works if you tick “Names only”. It tells you how it read your text and how many comments and people it found, so a wrong guess is easy to spot.

Everything you paste stays in your browser tab. When you read from a link, our server asks our data provider for the public comments and hands them straight to your browser. We don’t keep them. We do keep the post’s numbers for a short time, so the same post doesn’t cost us twice. The page shows counts and the winners and never lists everyone who commented.

If you would rather collect entries as they arrive, DMFast’s Giveaway template replies under comments that say WIN, sends the person a message asking them to confirm their entry and, on Instagram with a paid plan, can ask them to follow first. This picker doesn’t need it, and works on any post.