Simple Ways to Protect Your Privacy on Social Media

Privacy Isn't About Having Something to Hide

Let's clear something up first: wanting privacy online doesn't mean you're hiding anything. It means you're in charge of your own story — who gets to see it, who gets to keep it, and who gets to use it. If you knit, code, cosplay, stream, or run a tiny shop from your spare room, social media is probably where your people are. That's a genuinely lovely thing. But those same accounts also hold a surprising amount about you: your birthday, your location, your face, your friendships, sometimes your workplace and your daily routine.

None of that is a reason to log off. It's simply a reason to be a bit more deliberate. The good news is that protecting your privacy doesn't need a computer science degree or a whole weekend of tedious setup. A handful of small, sensible changes will do far more for you than any amount of worrying.

Build Passwords That Actually Pull Their Weight

If you're still reusing one password across several accounts — and most of us have done it — this is the single highest-value change you can make. When one site leaks, criminals don't just try that password there; they try it everywhere, automatically, within minutes.

• Use a passphrase. Three or four unrelated words strung together is both stronger and easier to remember than a jumble of symbols.
• Never reuse. One account, one password. No exceptions, especially for your email.
• Let a password manager do the remembering. A reputable one will generate long random passwords and fill them in for you. You only need to recall the master passphrase.
• Act on breach alerts. If you're told a password has appeared in a data leak, change it that day, and change it anywhere else you've used it.

Switch On Two-Factor Authentication Everywhere

Two-factor authentication — usually shortened to 2FA — is a fancy name for a simple idea. Even if someone learns your password, they can't get in without a second piece of proof that it's really you. It's the difference between a lock and a lock with a bolt.

• Prefer an authenticator app or a physical security key over codes sent by text message. Text codes can be intercepted; app codes are far harder to steal.
• Start with your email account. It's the master key to everything else, because password resets land there.
• Save your backup codes somewhere offline — a notebook in a drawer is fine. Losing your phone shouldn't mean losing your account.
• Turn it on for social accounts too, not just banking. A hijacked profile can do real damage to your friendships and your reputation.

Be Thoughtful About What You Share

Privacy settings aren't a one-off job you do when you join and never revisit. Platforms quietly change defaults, add features, and reset options, so it's worth checking in now and then with fresh eyes.

• Set your default audience to friends rather than public, so you have to make a conscious choice to broadcast wider.
• Lock down the personal details: phone number, email address, birthday, and your friends list are all useful to scammers.
• Look at the background of your photos. Street signs, house numbers, a work lanyard, a parcel label — all quietly reveal more than you intended.
• Turn off automatic location tagging and strip location data before posting pictures.
• Post holiday photos after you're home. Announcing that your flat is empty for a fortnight is an invitation nobody needs.

Do a Regular Account Review

Once a season, make yourself a cup of tea and spend twenty minutes tidying up. Think of it as a spring clean for your digital life — oddly satisfying once you start.

• Check connected apps. Old quizzes, games, and shopping tools often still have permission to read your profile. Revoke anything you don't recognise or no longer use.
• Review active sessions and devices. If there's a login from a city you've never visited, sign it out and change your password immediately.
• Delete dormant accounts. That forum you joined in 2011 is still holding your data. If you don't use it, close it.
• Look at tags and mentions. Untag anything you'd rather not have attached to your name, and check who can tag you in future.

Small Habits That Add Up

The everyday choices matter just as much as the settings. A little healthy scepticism goes a long way, and it doesn't have to make you cynical about the communities you love.

• Skip the quizzes and "your first pet plus your birth year" games. They're often thinly disguised ways of collecting answers to common security questions.
• Don't confirm personal details in direct messages, even if the sender sounds like a friend. Accounts get cloned constantly.
• Keep work and personal profiles separate, so a stranger can't piece together where you are on a Tuesday morning.
• Pause before posting in real time. Sharing where you are right now is far riskier than sharing where you've been.

None of this needs to feel like locking yourself in a bunker. Privacy is a practice, not a fortress — a few quiet habits, repeated, that keep you in control of your own corner of the internet. You're allowed to be visible and still be the one holding the keys.