Back to Cybersecurity GuidesCybersecurity

Safe Social Media Habits

5 min read · Beginner-friendly

Social media is not inherently unsafe

The goal is not to delete your accounts. The goal is to use them in a way that protects you — from scams, from impersonation, from harassment, and from sharing more than you intended.

Lock Down Your Privacy Settings

Spend 10 minutes on each platform you use. Here is what to look for:

Facebook

  • Settings → Privacy → Who can see your future posts? → Friends only
  • Settings → Privacy → Limit past posts → Limit (this retroactively sets old public posts to friends-only)
  • Settings → Privacy → Who can look you up using your email/phone? → Friends only or Only me
  • Settings → Profile and Tagging → Review posts you're tagged in → On

Instagram

  • Settings → Account Privacy → Private Account (if you do not need a public presence)
  • Settings → Messages → Who can send you message requests? → People you follow
  • Settings → Story → Hide story from → Add anyone you do not want viewing your stories

WhatsApp

  • Settings → Privacy → Last Seen & Online → My Contacts
  • Settings → Privacy → Profile Photo → My Contacts
  • Settings → Privacy → Groups → My Contacts (prevents strangers adding you to groups)
  • Settings → Privacy → Two-step verification → Enable (adds a PIN to your account)

TikTok

  • Settings → Privacy → Private Account → On
  • Settings → Privacy → Who can send you direct messages → No one (if you do not use TikTok DMs)
  • Settings → Privacy → Suggest your account to others → Turn all off

What to Think About Before You Post

Every post, photo, and comment contributes to your digital footprint. Before posting, ask yourself:

  • Would I be comfortable with my employer (or future employer) seeing this? Employers check social media. A post that feels funny at midnight on Saturday might not read the same way in an interview on Monday.
  • Am I sharing someone else's information? Do not post photos of other people without their permission. Do not share screenshots of private conversations.
  • Am I revealing my location or routine? Posting "On holiday in Livingstone for the next two weeks!" tells the world your home is empty. Post photos after you return.
  • Is this true? If you are sharing news or information, verify it first. Misinformation spreads faster than truth on social media — do not be part of the problem.

Avoiding Impersonation and Account Takeover

  • Turn on two-factor authentication for every social media account. This is the single most effective thing you can do to prevent your account from being hijacked.
  • Watch for fake accounts. If a "friend" sends you a new friend request from a profile with no posts and a recent creation date, it is not your friend — it is someone trying to impersonate them. Contact your friend through another channel and let them know.
  • Never share verification codes. WhatsApp, Instagram, and Facebook all send six-digit codes to verify your identity. Scammers will try to get these codes from you. Never share them with anyone, for any reason.

Handling Harassment and Abuse

  • Block immediately. You do not owe anyone an explanation. Blocking removes their access to you. Use it freely.
  • Report abusive accounts. Every platform has a reporting mechanism. Use it. Reports are anonymous.
  • Take screenshots. Before blocking or reporting, take screenshots of the abusive messages. You may need them later if the situation escalates.
  • Tell someone you trust. Online abuse is real and harmful. You do not have to deal with it alone.

The Golden Rules

  1. Assume anything you post could become public — even if your account is private.
  2. Turn on two-factor authentication everywhere.
  3. Review your privacy settings every six months — platforms change their defaults.
  4. Be sceptical of messages from strangers — especially if they involve money, opportunities, or requests for personal information.