Skip to content

Social Media Security Checklist

Intro

Although these networks are a great way to promote social interaction and bring people together, they have a dark side - there are some serious Privacy Concerns with Social Networking Services. Social networking sites are owned by corporations, and they make their money by collecting data about individuals. Secure your accounts and lock down your privacy settings, but always be aware that anything you post could easily become public. – If possible, avoid using conventional social media networks.

Checklist

Essential Activities

  • Secure Your Account
    Priority: Essential
    Use unique, strong passwords and always enable multi-factor authentication (2FA/MFA) to prevent someone hacking your account. Social media profiles are a frequent target.

  • Check Privacy Settings
    Priority: Essential
    Social networks allow you to control your privacy settings. Ensure that you are comfortable with what data can be seen by folks you don't know (or don't know well).

  • Think of All Interactions as Public and Permanent
    Priority: Essential
    Assume that your private content can be viewed by others. Before uploading, posting or commenting on anything, ask yourself "Would I mind if this was totally public, forever?" Nothing is truly private on social media.

  • Don't Reveal Much
    Priority: Essential
    Avoid sharing details like birth dates or hometowns that can be used to personalize phishing scams. Profile information creates a goldmine of data for hackers.

  • Be Careful With What You Post
    Priority: Essential
    Status updates, comments, check-ins and media can unintentionally reveal a lot more than you intended. This is especially relevant to photos and videos, since they may show things in the background.

  • Don't Share Your E-mail or Phone Number Publicly
    Priority: Essential
    Don't post your email address or mobile number publicly. It gives hackers, trolls, and spammers more data about you, and it can also allow them to connect your social media profile to other data about you. Be cautious when sharing your contact info in a private message.

  • Don't Grant Unnecessary Permissions
    Priority: Essential
    Deny social media apps (and all apps that don't really need it) access to your contacts, location, photos, call logs, etc. if they aren't strictly required. At a minimum, allow them to use such information only when you're actively using the app. Many apps request access to data that they don't need. (DNC Jan 2026) .

  • Be Careful of 3rd-Party Integrations
    Priority: Recommended
    Avoid signing up for accounts using a Social Network login. Revoke access to social apps you no longer use.

  • Avoid Publishing Your Location Data while still at the Location
    Priority: Recommended
    Wait until you have left a location (like a restaurant or airport) before sharing content that reveals where you are.

Advanced Activities

  • Consider Using an Fake Name
    Priority: Advanced
    Consider using an alias and false contact details. You can use a name similar to your actual name, so folks who know you well will recognize you. e.g. Use your first name but only part of your last name.

  • Avoid Social Media Altogether
    Priority: Advanced
    Social media is fundamentally un-private, so for maximum online security and privacy, avoid using any mainstream social networks.