DeviceFarm
All guides
By the DeviceFarm TeamUpdated 12 min read

How to Run Multiple Accounts Without Getting Banned

To run multiple accounts without getting banned, give each account its own device identity and its own IP, keep both consistent every session, and use each account like one ordinary person would. Most cascading bans start with a single shared signal: one phone, one Wi-Fi network, one recovery number, one payment card or identical timing.

Multi-accounting is routine work. Agencies run client brands, sellers run several storefronts, marketers test messages in different markets. Platforms do not usually ban accounts for existing side by side. They ban them for looking like one operator hiding behind many identities, and they act on every account they can connect. No setup guarantees an account survives, because each platform enforces its own terms. What you control is whether your accounts are linked, and whether one account’s problem can travel to the rest. This guide covers both, from the signals platforms read to a full setup, per-platform notes, team workflow and cost.

Is it allowed to run multiple accounts?

It depends on the platform and on what the accounts do. Instagram and TikTok let you switch between several accounts inside their apps: Instagram’s Help Center allows up to 10 logged in at once, and TikTok’s Community Guidelines say you can have multiple accounts as long as they are not used to deceive. Meta’s Terms of Service allow one personal Facebook account per person; brands are meant to run Pages and ad accounts through Meta’s business tools instead. Across platforms, the rules that end accounts are about behavior: evading a ban, faking engagement, impersonating someone, or coordinating accounts to manipulate votes or reach.

Some of that behavior is also a legal matter. In the US, the FTC’s 2024 rule on reviews and testimonials prohibits selling or buying fake indicators of social media influence, such as bot-generated followers or views (announced by the FTC on August 14, 2024). Running separate accounts for separate, legitimate purposes is a terms-of-service question; selling fake engagement is not. This guide assumes the first and is not legal advice; are phone farms legal covers the law in more depth.

A platform does not need to prove that two accounts belong to one person. It only needs one shared value between them, and then it treats them as a cluster. Those values come from four layers:

  • Device. The properties an app can read: Android ID, model and build fingerprint, screen, sensors, timezone and locale. Together they form the device fingerprint.
  • Network. The IP address, the network that owns it (a home ISP, a mobile carrier or a hosting company), and where it geolocates.
  • Account. Recovery email, recovery phone number, payment card, contacts uploaded from the phone, and the Google account signed into the device.
  • Behavior. Login times, action sequences, identical captions or links posted across accounts, and accounts that interact mostly with each other.

Once an edge exists between two accounts, enforcement travels along it. That is why the typical failure of multi-accounting is not losing one account. It is a group of accounts going down in the same hour, including ones that did nothing wrong.

Why do the usual shortcuts fail?

  • Five accounts in one app’s account switcher share one device, one fingerprint and one IP. The switcher is convenient precisely because the platform knows the accounts are together; how many accounts per phone lists what each app allows.
  • Five phones on your office Wi-Fi are five devices behind one IP. The network layer links them even when the devices do not.
  • A VPN changes the IP, not the device or the account details, and every account on the same VPN exit shares that address. Many VPN ranges are also registered to hosting companies.
  • A factory reset gives a phone a new Android ID, but its model, build and hardware profile stay the same, and so does its IP if it stays on the same network.
  • Antidetect tools that randomize values on every launch create a device that changes identity daily, which is a signal of its own.
  • Emulator farms on PCs expose x86 processors and emulator-specific properties that apps can read. The Android emulator entry lists the checks.

What does real account isolation require?

Device isolation means two accounts share no observable value, and keep sharing none over time. In practice, five conditions have to hold together for every account:

  • Its own device identity, unique and persistent: the same identifiers every session, for as long as the account exists.
  • Its own IP, from a residential proxy or a mobile proxy, located where the account claims to be.
  • Coherence between the two: timezone, language and locale that match the proxy’s country.
  • Its own account details: a separate recovery email, a separate phone number, no shared payment card, no contact sync between accounts.
  • Its own rhythm: activity at different times and in different sequences from the other accounts.

Miss any one of them and the other four lose most of their value. A perfect device on a shared IP is linked. A perfect device and IP with a shared recovery number is linked at the account layer, where no device separation reaches.

Which setup works best: phones, emulators or cloud phones?

Operators who need many isolated accounts end up running some form of phone farm. There are three ways to build one, and the right choice depends on account count, time and budget.

1. A rack of phones you own

Buy used Android phones, wire them to powered USB hubs, and configure a proxy on each. You get full control and no subscription. You also get $60–120 per device upfront, plus hubs and racking, batteries that swell on permanent charge, failing cables, and a shelf for every twenty devices. It suits teams with more time than budget and a reason to keep hardware on site.

2. An emulator farm

Stack Android virtual machines on a PC or server. Instances are fast to create and cheap to run, which makes emulators the right tool for building and testing apps. For accounts you need to keep for months, the x86 traits are the problem: they are the same on every instance and easy for an app to read. Cloud phone vs emulator compares the two in detail.

3. A cloud phone farm

Rent Android cloud phones that run on ARM phone hardware in a datacenter and stream to your browser. Each device in a cloud phone farm keeps its own persistent identity (IMEI, Android ID, MAC, Bluetooth MAC, Wi-Fi BSSID, serial, model, timezone, locale) and its own proxy slot for the proxy you bring, goes live in under 60 seconds, and someone else maintains the hardware. This is the route that grows from 20 to 6,000 devices without a server room.

Three ways to run isolated accounts on Android (proxies are extra in every case)
Phones you ownEmulator farmCloud phone farm
Upfront cost$60–120 per used phone, plus hubs and rackingFree software plus the PC or serverNone; $39.99 per 30 days for 20 phone slots, plus metered runtime
Device identityThe handset’s own, persistentSimulated x86 hardware, the same traits on every instancePersistent per phone, on ARM hardware
UpkeepBatteries, cables, hubs and someone on siteYou maintain the machinesThe provider maintains the hardware
Limit on scaleA shelf for every twenty devicesCPU cores and memory20 to 6,000 phones per account
Best forUnder about ten accounts with someone on siteBuilding and testing appsMany long-lived accounts run by a team

A quick way to decide: if the platform is web-only, an antidetect browser may be enough; cloud phone vs antidetect browser explains where each one stops. If the accounts live in mobile apps such as TikTok or Instagram, you need Android devices. Below about ten accounts, owned phones can work if someone is on site. Past that, compare the full cost of each route with the phone farm cost calculator.

How do you set up multiple accounts step by step?

Here is the setup, in order. It applies whether the devices are phones you own or cloud phones.

  1. List every account and give it a risk tier. Client and revenue accounts are tier 1 and never share anything. Test accounts can be grouped.
  2. Assign one device per tier-1 account, and name it so anyone can read it: client, platform, handle. Group devices by client or project and tag them by market.
  3. Attach one proxy per device, in the account’s country and ideally its city. Use sticky sessions or a static IP for logged-in work, never a pool that rotates mid-session. Our guide to residential proxies for cloud phones covers which type to buy.
  4. Set timezone, language and locale to the proxy’s region before you open any app. On DeviceFarm the phone’s language can follow the proxy automatically when you create it.
  5. Create or log into the account with its own recovery email and phone number, and skip contact sync.
  6. Warm the account up before it does real work. See account warmup for what that period is measuring.
  7. Schedule activity at staggered, human-paced times, with different action sequences per account.
  8. Keep the pairing for life: the same account on the same device behind the same proxy. Write it down.

What changes from one platform to another?

The isolation model is the same everywhere. What each platform weighs most heavily is not.

TikTok

TikTok is built around the mobile app and is sensitive to region. An account meant for the US feed should run on a device whose proxy, timezone, language and app store region all say US. Operators usually spend a new account’s first days watching rather than posting, so it builds an ordinary viewing history before it publishes anything. A dedicated cloud phone for TikTok per account keeps those signals clean, and does TikTok ban all your accounts explains how TikTok connects accounts when one is banned.

Instagram

Instagram is part of Meta’s account system. Adding accounts to the same Accounts Center connects them on purpose, which is right for a brand’s own profiles and wrong for accounts that must stay separate. Expect “confirm it’s you” checks after logins from a new device or a sudden location change; a stable device and proxy per account is what keeps those rare. See cloud phones for Instagram for the per-account setup, and Instagram multiple accounts for what the app allows.

Facebook

Facebook expects one personal profile per real person. Brand and client work belongs in Pages, Business Manager and ad accounts, which link to each other through admins and payment methods. A shared card across ad accounts is one of the strongest links there is, and no device setup removes it.

Reddit

Reddit weighs account age, karma and community rules. The Reddit Rules ask you to participate authentically and prohibit content manipulation, which covers using your own accounts to upvote each other, and posting the same link from several accounts reads as coordination. Each account needs its own history in its own communities.

Which habits keep accounts alive after setup?

  • Ramp up slowly. Follows, posts and messages should grow over weeks, not jump on day two.
  • Vary timing and sequences. Ten accounts that open, scroll for 90 seconds and like the third post at the same minute are linked by behavior alone.
  • Post original content per account, not the same video with the same caption everywhere.
  • Never log an account into a second, unisolated device “just to check something”. One session can undo months of clean history.
  • Keep the same proxy. Changing the account’s country, or its IP range mid-session, is a bigger signal than staying on an ordinary residential IP.
  • Retire devices with the account. When an account is deleted, delete its phone rather than reusing the identity for a new one.
The goal is not to hide that you run many accounts. It is to make sure each account looks like what it is: one user, on one phone, in one place.

How do teams manage many accounts without leaks?

At scale, most leaks are human: a VA who logs into the wrong account from the wrong device, or a former contractor who still has access. Give every person their own login instead of sharing one. On DeviceFarm, team seats are unlimited at no extra cost, you can assign each phone to a member so that, with per-member isolation turned on, a VA sees only their own devices, and usage is tracked per member. When someone leaves, removing them cuts their access to the phones. There are no roles or activity logs yet, so keep your own register of who works on which account. Agencies will find the full workflow in our guide to running a phone farm for agencies.

What does it cost to run multiple accounts on cloud phones?

On DeviceFarm the bill has two parts: a plan that buys phone slots for 30 days, and runtime billed per minute at $0.012, capped at $2.10 per phone per day. Every paid plan includes 60 free runtime minutes a month, shared by the account. Two worked examples:

  • 20 accounts, each phone running 30 minutes a day: 18,000 minutes a month, minus 60 free, is 17,940 × $0.012 = $215.28, plus the $39.99 Starter plan. Total $255.27, or about $12.76 per account.
  • 100 accounts at 20 minutes a day: 60,000 minutes, minus 60 free, is $719.28, plus $59.99 for the 100-phone plan. Total $779.27, or about $7.79 per account.

Proxies are billed by your proxy provider on top, and built-in automations or API access add the $99-a-month Automation add-on if you use them. The daily cap means the worst case is known in advance: a phone left running all day never costs more than $2.10 that day. Every tier is listed on the pricing page, and phone farm rental explains how the 30-day plans work.

What should you do when an account gets flagged?

  • Stop automated activity on that account and leave it on its own device and proxy.
  • Do not log into it from another device or another IP to investigate. That creates the link you were avoiding.
  • Check whether it shares anything with other accounts: recovery details, a payment card, a proxy that was reassigned, content posted across accounts.
  • Use the platform’s own account status page and appeal process.
  • If the account is lost, retire its device rather than recycling the identity.

The short version

Linked bans come from shared signals: one device, one IP, one recovery number, one rhythm. Give every account its own persistent device identity and its own matching proxy, keep account details separate, use each account like one ordinary person would, and keep the pairing for life. For mobile apps, the most direct way to do that at scale is a phone farm on cloud phones, where isolation is how the devices come out of the box.

Sources

Frequently asked questions

For accounts that must not be linked, one. Every account in an app’s switcher shares the same device identity and IP, so the platform already knows they are together. Grouping several low-stakes test accounts on one device is fine; keep client and revenue accounts on their own devices.

Not if they need to stay separate. A shared exit IP is one of the easiest links for a platform to draw. Give each account its own proxy, in the country the account claims, and keep that proxy for the life of the account.

No. A VPN changes only the IP address. The device identifiers, recovery details and behavior stay the same, and every account on the same VPN exit shares that address. Many VPN ranges are also registered to hosting companies rather than home ISPs.

Only if the platform can link them. Bans spread along shared signals: the same device, IP, recovery number, payment card or behavior pattern. Accounts that share none of those are judged on their own history.

Yes, for accounts that must stay separate. A recovery email or phone number reused across accounts links them at the account level, which no device or proxy setup can undo.

For testing, yes. For accounts you need to keep for months, emulators on PCs expose x86 processors and emulator-specific system properties that apps can read, and every instance shows the same traits. Android devices on ARM hardware do not show those x86 traits.

Having several accounts is generally a terms-of-service matter, not a crime. What can be illegal is what accounts are used for: fraud, impersonation, or selling and buying fake engagement, which the FTC’s 2024 rule prohibits in the US. Check the rules where you operate; this is not legal advice.