Social media can help you communicate, learn, share interests and stay connected with other people.
It can also expose information about you to people you did not intend to reach.
Safe social media use is not about avoiding everything online.
It is about knowing what you share, who can see it and how to respond when something does not feel right.
Start with your privacy settings
Social media accounts usually include controls for deciding who can see your profile, posts, stories, contacts and other information.
Review these settings instead of assuming the default choices match what you want.
Ask:
- Who can see my posts?
- Who can see my list of friends or followers?
- Who can send me messages?
- Who can tag or mention me?
- Can people find my account using my phone number or email address?
- Can my location be shared?
Privacy settings are useful but not a guarantee of secrecy
Limiting an audience reduces exposure, but anything you share with another person can potentially be copied, saved or shared again.
Before posting, imagine that the information could eventually reach someone outside the audience you selected.
If that possibility would create a serious problem, consider not posting it.
Think about your digital footprint
Your digital footprint includes information about you that can be found or inferred from your online activity.
A single post may seem harmless.
But many small details collected over time can reveal much more.
For example, posts might reveal:
- your school
- your interests
- places you regularly visit
- people you spend time with
- your birthday
- your routines
- clubs or teams you belong to
Some of this information can help scammers make messages seem more believable.
Share only what serves a purpose
Before posting personal information, ask:
Does this information actually need to be public?
You do not need to publish every detail that a profile allows you to enter.
Leaving unnecessary information private can reduce what strangers, scammers and fake accounts can learn about you.
Protect details that could be used for account recovery
Be especially careful with information that may appear in account recovery questions or identity checks.
Examples might include:
- full birth date
- home address
- telephone number
- personal email address
- family details
- school or workplace information
Different services use different recovery methods, but reducing unnecessary public personal information is still a useful habit.
Be careful with live location
Some apps can share your current location with friends, followers or other users.
Location sharing can be useful when you intentionally use it with people you trust.
It can also reveal where you are, where you have been or where you regularly go.
Check who can see your location and whether sharing remains active after you expect it to stop.
Review location permissions
Look at both:
- the social media account settings
- the location permissions on your phone or other device
You may decide that an app needs location only while you are actively using a particular feature.
Another app may not need location access at all.
Choose the level that matches the feature you actually use.
Photos can reveal location clues
A post does not need to display a map to reveal where you are.
A photo may show:
- a street sign
- a school name
- a building number
- a transport stop
- a sports club
- a familiar landmark
Look at the whole image before publishing it.
Consider posting after you leave
If a public post would reveal your exact current location, consider waiting until you have left before sharing it.
This is especially useful when the location is somewhere you do not want strangers to know you are visiting in real time.
Not every account is who it claims to be
Fake profiles are common on social platforms.
An account may pretend to be:
- a friend
- a celebrity
- a business
- a competition organizer
- a potential employer
- a person with similar interests
Do not assume that a profile photo or familiar name proves the identity behind an account.
Be cautious with unexpected friend or follow requests
If you receive a request from someone you already know, ask whether the request makes sense.
You might already be connected to that person.
A duplicate account can be a sign of impersonation.
If you are unsure, contact the person through another method you already trust.
Look beyond follower counts and profile appearance
A professional looking profile can still be fake.
Follower counts can also be misleading.
Consider several signals together:
- when the account appears to have been created
- whether its posts are consistent
- whether the username looks unusual
- whether the person is asking for something unexpected
- whether another trusted contact can confirm the account
Unexpected messages deserve extra attention
Scammers use direct messages as well as email and text messages.
Be cautious when an unexpected message asks you to:
- click a link
- send money
- buy gift cards
- share a verification code
- send personal information
- move the conversation to another platform immediately
- act before you have time to check the story
A message from a friend can still be suspicious
A real friend's account can be taken over.
If someone you know suddenly asks for money, account information or another unusual favour, verify the request another way.
For example, contact the person using a telephone number or conversation channel you already used before the suspicious message arrived.
Be careful with links in direct messages
A social media message may lead to a fake login page, scam shop or malicious website.
Do not sign in merely because a page looks familiar.
If a message claims that an account needs attention, open the real service independently instead of using the message link.
Review How to Recognize Phishing Messages for more guidance.
Social media ads are not automatically trustworthy
An advertisement appearing inside a familiar social platform is not proof that the seller or offer is genuine.
Scammers can advertise fake shops, investments, jobs and other offers.
Before buying or sending money, investigate the company independently.
Be suspicious of extreme urgency
Scams often try to reduce the time you have to think.
Examples include:
Only five minutes left.
Your account will close immediately.
Send the money now.
Urgency alone does not prove a scam, but unexpected pressure is a reason to pause and verify.
Be careful with competitions and giveaways
A fake account may claim that you won a prize or were selected for a giveaway.
Before responding:
- check whether you actually entered
- verify the organizer independently
- do not send passwords or verification codes
- do not pay an unexpected fee just to receive a supposed prize
Never share authentication codes in a conversation
A login or recovery code is normally intended for the authentication process you started.
A person in a direct message does not need your authentication code to prove that you own your account.
If someone asks for it, stop the conversation.
Protect the social media account itself
Use a strong unique password if the service still relies on passwords.
Do not reuse the same password on several social platforms.
Use a password manager when appropriate so each account can have a different generated password.
Review Password Managers Explained Clearly for more information.
Turn on multi factor authentication
If the platform supports multi factor authentication, enable it.
This adds another security check if someone obtains your password.
Use the strongest practical method that you can maintain safely.
Review Multi Factor Authentication: What It Does and Why It Helps for more guidance.
Review active sessions and trusted devices
Some platforms let you see devices or sessions currently signed in to your account.
Review these lists occasionally.
If you see a device or session you do not recognize, use the platform's official security process to investigate it.
Keep recovery details current
Check that the email address and telephone number used for account recovery still belong to you.
Remove outdated recovery information when the platform allows it.
An old recovery method can become a weakness even when your normal login is strong.
Do not give applications more access than they need
Social platforms may connect with games, editing tools, quizzes and other applications.
Before connecting another application, review what information it wants to access.
If an application no longer serves a purpose, consider removing its access through the platform's official settings.
Think before using social quizzes
Some harmless looking quizzes ask questions about:
- your first school
- pets
- family names
- birthdays
- favourite places
These details may reveal more personal information than you intended.
You do not need to answer every public quiz simply because friends are doing it.
Choose carefully before sharing other people's information
Your safety choices also affect friends and family.
Before posting another person's:
- photo
- location
- telephone number
- school information
- private conversation
consider whether they are comfortable with it being shared.
Tags can reveal information too
A friend may tag you in a location, photograph or event.
Review the platform's controls for tags and mentions.
Some platforms allow you to review a tag before it appears publicly on your profile.
Separate public and private audiences carefully
A public account and a private group do not have the same audience.
Before posting, check which profile, group, story or channel you are using.
It is easy to share something with a larger audience simply by choosing the wrong destination.
Know how to block and report
Social platforms normally provide tools to block accounts and report content or behaviour.
Use these tools when appropriate.
You do not have to continue responding to an account that is harassing, impersonating or repeatedly trying to scam you.
Save useful evidence before reporting serious problems
If you need to report impersonation, harassment or another serious issue, the platform or a trusted adult may need information about what happened.
When it is safe to do so, record useful details such as:
- the account name
- the date
- the message or post
- the profile address
Do not continue engaging with a harmful account simply to collect more evidence.
Ask a trusted adult for help when needed
If you are a teenager and something online makes you feel unsafe, threatened, pressured or confused, involve a trusted adult.
This could be a parent, caregiver, teacher, school staff member or another responsible adult you trust.
Serious problems are easier to handle when you do not have to manage them alone.
If your account may have been hacked
Warning signs can include:
- a password change you did not make
- messages you did not send
- posts you did not create
- unknown login alerts
- new recovery information you did not add
Use the platform's official account recovery process.
If you can still sign in, review your password, authentication methods, recovery details and active sessions.
Do not respond publicly to every suspicious account
Arguing with a scammer can keep the interaction going and may reveal additional information.
When appropriate, block, report and move on.
If the account appears to impersonate someone you know, tell the real person through another trusted method.
A simple social media safety routine
From time to time, review:
- who can see your posts
- who can message or follow you
- whether location sharing is active
- connected applications
- active sessions and trusted devices
- your recovery details
- whether multi factor authentication is enabled
- whether old public posts reveal information you no longer want visible
Before posting, use three questions
Ask:
- Who can see this?
- What does this reveal about me or someone else?
- Would I still be comfortable if the post reached a wider audience?
Those few seconds can prevent many unnecessary privacy problems.
Before responding to a message, use three more questions
Ask:
- Was I expecting this message?
- Can I confirm who sent it?
- Is it asking for money, personal information, a password, a code or an urgent action?
If something does not fit, pause and verify independently.
Common social media safety mistakes
- leaving privacy settings unreviewed
- publicly sharing unnecessary personal details
- sharing live location without checking the audience
- accepting every friend or follow request
- trusting an account because it has many followers
- clicking unexpected direct message links
- assuming advertisements are automatically verified
- sharing verification codes
- reusing passwords
- ignoring unexpected login alerts
Social media safety checklist
Check whether you can answer yes to these questions:
- Have I reviewed my privacy settings?
- Do I know who can see my posts?
- Do I know whether my location is being shared?
- Do I limit unnecessary personal information?
- Do I verify unusual requests from people I know?
- Do I avoid unexpected links and requests for authentication codes?
- Does this account have a unique password if it uses passwords?
- Is multi factor authentication enabled where available?
- Are my recovery details current?
- Do I know how to block and report suspicious accounts?
The main idea
Safe social media habits begin with controlling what you share and who can see it.
Review privacy and location settings, limit unnecessary personal information and remember that profiles and messages can be fake.
Protect the account itself with a unique password and multi factor authentication.
Pause before clicking unexpected links, sending money, sharing private details or approving a login request.
When something feels wrong, verify it independently and use the platform's block, report and recovery tools when needed.
Continue learning
Review Complete Guide to Staying Safe Online for the wider Digital Safety framework.
Review How to Recognize Phishing Messages for suspicious messages and links.
Review Multi Factor Authentication: What It Does and Why It Helps for stronger account protection.