Keep your account details private

Your social media account can contain personal conversations, photos and information about people close to you. A few careful habits can make it harder for someone else to access it or trick you into sharing sensitive details.

Use a strong, unique password

Choose a password that is difficult to guess and do not reuse it across multiple accounts. A long passphrase made up of unrelated words can be easier to remember than a short, complicated password. If you struggle to keep track of passwords, consider using a reputable password manager and protect it with a strong master password.

Avoid passwords based on information others may know or find on your profile, like your name, birthday, phone number or favourite team. Do not send your password to anyone in a message, even if the person claims to be a friend or platform representative.

Turn on two-step verification

Where available, enable two-step verification, also called two-factor authentication. It asks for an additional check when you sign in, such as a code or approval on a device. This can add protection if someone learns your password.

Never share a sign-in code with another person. A caller or message asking for a code to secure, verify or restore your account may be an attempt to take it over. Use the platform’s own app or website to review security options rather than following an unexpected link.

Pause before clicking links

Scam messages may create urgency by claiming that your account will be closed, a payment is waiting, or you must act immediately. They may arrive through social media, email, text messages or messaging apps.

Before opening a link, check who sent it and whether the request makes sense. Be cautious of unexpected links, spelling mistakes, unusual web addresses and requests to log in or provide personal information. If a message appears to come from a bank, delivery company or social platform, visit its official app or type its known web address yourself instead of using the message link.

Check requests for money or personal information

A message from a familiar account is not automatically genuine. Someone else may have gained access to it, or a scammer may be using a similar-looking profile. Be especially careful when a contact unexpectedly asks for money, a transfer, airtime, a password or a verification code.

If you are unsure, contact the person using a separate method you already trust, such as calling their usual phone number. Do not rely only on replying to the suspicious message. Avoid sending money under pressure, and take time to verify the request.

Review privacy and account activity

Check your account’s privacy settings and choose who can see your posts, contact you or find you using personal details. Remove access for apps or services you no longer use. Review active sessions or logged-in devices when the platform offers that option, and sign out of devices you do not recognise.

On a shared or public device, do not save your password. Log out when you finish, and avoid accessing sensitive accounts over an unfamiliar connection if you can use a more trusted option.

Be thoughtful about what you post

Details shared publicly can help someone guess passwords or make a scam message sound convincing. Consider limiting public information such as your full date of birth, travel plans, address and phone number. Check who can see photos or posts before sharing them, particularly when they include other people or identifying details.

If you think your account has been compromised

Act promptly, but use the platform’s official recovery process. If you can still sign in, change your password to a new, unique one and review active sessions, connected apps and security settings. If you cannot access the account, use the platform’s account recovery page reached through its official website or app.

Tell close contacts through another channel that your account may be compromised so they can be wary of unusual messages from it. If you reused the same password elsewhere, change it on those accounts too. Keep screenshots or details of suspicious messages if you may need to report them, and report the account or message through the platform’s available tools.

Quick checklist

• Use a strong password that you do not reuse.
• Enable two-step verification and keep sign-in codes private.
• Avoid unexpected links; go to official apps or websites directly.
• Verify unusual requests for money or sensitive information using another trusted channel.
• Review privacy settings, active sessions and connected apps.
• Use the platform’s official recovery and reporting options if something seems wrong.

These steps can reduce common risks, but no single measure guarantees complete security. Taking a moment to verify before clicking, sharing or sending money can help you make safer choices online.