1. Lock your account
The NCSC recommends two-step verification on social media. It stops criminals getting in, even if they know your password. Here’s how to turn it on. Use a strong password you don’t use anywhere else, too.
2. Check who can see your posts
Every big platform has privacy settings. Look in your account’s Settings for Privacy, and choose who can see your posts, your friends list and your profile details. The NCSC links to each platform’s own guide, including Facebook, Instagram, X, TikTok, YouTube, LinkedIn and Snapchat.
3. Think before you post
The NCSC says criminals use the information you share to steal identities or make scam messages more convincing. Ask yourself:
- Who can see this post?
- Does everyone need to know this? Your date of birth, address, pet’s name or holiday dates can all help a criminal.
- What are friends and family posting about you?
4. Watch out for fake accounts
Not everyone online is who they say they are. The NCSC suggests checking:
- whether you actually know the person;
- when the account was set up (a brand-new account is a warning sign);
- a name made of random letters and numbers.
Odd message from a friend? Their account may have been hacked. Contact them another way, like a phone call, before you reply or click anything.
You can report fake profiles and posts to the platform. Look for Report in the menu on the profile or post.
Next: learn how to spot a scam text.
Sources
- National Cyber Security Centre (UK), Social media: how to use it safely, checked 14 Oct 2026.