A username is enough for a public check
FollowerSignal does not need to post, message, or change settings. It accepts a public username and asks its configured provider for public relationship information. Your Instagram password, cookies, and two-factor codes are never required.
What remains private
The service cannot read direct messages, private posts, private follower lists, account settings, saved posts, or internal Instagram analytics.