Protecting Your Personal Data on Social Media

Social media is built to encourage sharing — that's the entire business model. But every detail you post becomes raw material for scams, identity theft, and targeted attacks. Cybercriminals routinely scrape profiles for full names, birthdays, employer info, family relationships, and travel plans, then use that information to impersonate you or someone you trust. You don't have to quit social media. You just need to share more deliberately.

What Attackers Actually Look For

Common security questions are answered every day on Facebook and Instagram: your mother's maiden name, your first pet, the street you grew up on, your favorite teacher. Scammers also harvest your job title to craft business email compromise scams, your vacation photos to know when your house is empty, and your family connections to impersonate a relative in distress.

Settings to Change Today

Make profiles private by default. Limit who can see your posts to friends or approved followers. Public profiles are easy targets.

Disable location sharing. Turn off geo-tagging on photos and refuse "share location with this post" prompts. Geotags can reveal your home address with surprising accuracy.

Lock down friend lists. Hide your connections so impersonators can't find your friends to target separately.

Disable face recognition. Platforms that auto-tag you in others' photos build a profile of you that's outside your control.

Audit connected apps. Every quiz or third-party login you ever clicked is probably still attached to your account. Revoke anything you don't actively use.

Be Mindful About What You Post

Before posting, ask: would I want a stranger to know this? Things to think twice about include real-time travel updates ("Off to Spain for two weeks!"), photos showing your house number or license plate, screenshots that include your full email or phone number, and details like your birthday with the year. Posting your travel photos after you return is just as fun and far safer.

Watch Out for Account Cloning

Scammers copy your profile picture and name, then send friend requests to everyone on your list. Once accepted, they message your contacts asking for money or sending malicious links. Check periodically by searching for your own name on each platform — and if you find a clone, report it immediately. Warning your followers to ignore duplicate requests prevents the scam from spreading.

Don't Trust Quizzes and Trends

"What's your stage name? Your first pet's name + the street you grew up on!" Cute trends like this exist because they harvest exactly the answers used by password recovery questions. Skip them. The same goes for "personality quizzes" that demand login through Facebook — those apps then receive a copy of much of your profile data.

Use Strong, Unique Logins for Each Platform

Social media accounts are constant targets. Use a long, unique password (stored in a password manager) and turn on two-factor authentication. If a hacker takes over your Instagram or Facebook, they don't just embarrass you — they use the account to scam your friends and harvest more data.

A Healthy Default: Less Is More

The simplest rule is the strongest one: share less than you think you should. Every detail you don't post is a detail attackers can't use. Privacy on social media isn't about disappearing — it's about keeping the things that matter inside the circle of people you actually trust.