Criminals want social accounts for one main reason: your friends trust you. This guide is part of our guide to securing your key accounts.
Why hackers want your profile
- To scam your contacts. "I'm stuck abroad, can you send money?" works better from a friend.
- To promote fake investments, often crypto.
- To reach your other accounts, through shared logins.
- To sell the account, especially with a popular username.
The basics for every platform
- Use a unique password. Generate it in your password manager.
- Turn on two-factor login. Use an authenticator app rather than SMS if you can.
- Save your backup codes. See backup codes.
- Turn on login alerts.
- Check your email address and phone on the account.
Review these settings
| Setting | What to do |
|---|---|
| Active sessions | Log out of anything unfamiliar |
| Third-party apps | Remove quizzes, games and old tools |
| Recovery details | Make sure they are current |
| Privacy of posts | Limit who can see personal details |
| Who can message you | Restrict strangers if you get spam |
Scams to watch for
- "Is this you in this video?" A link leads to a fake login page.
- Copyright or verification threats. "Your account will be deleted", which often target business pages.
- Fake support accounts. They reply to your public complaints.
- Friend in trouble. The account that messaged you may have been hacked.
- Quizzes. "Your first pet + street name" collects the answers to security questions.
What not to share
Your date of birth, phone number, address, travel dates and the name of your school can all help someone impersonate you. Crypto holders should also avoid posting about their holdings. See physical threats.
If you are locked out
Use the platform's official help page, reached by typing the address, and follow the signs of a hacked account. Be careful of "recovery experts" who reply to your posts, because they are often scammers.
Tell your friends through another channel, so that they do not fall for messages from your account.