The most useful social media privacy settings fall into six groups: who can see your posts, who can find you, who can contact or tag you, what connected apps can access, how your data is used for ads, and how well the account itself is protected. Each platform names and places these options differently, so use the checklist below as a map and look for the nearest equivalent in the settings menu.
Before you start
Set aside about twenty minutes per account and open the settings on a computer if you can, where menus are easier to read. Settings change, and platforms sometimes reset defaults after updates, so a periodic recheck is worthwhile. Do the review while signed in, then look at your profile as a stranger would by viewing it in a private window or signed out, as explained in our private browsing guide.
The social media privacy settings checklist
1. Audience and visibility
- Choose a default audience for new posts. “Friends” or “followers only” is safer than “public” for everyday sharing.
- Consider limiting past posts to a narrower audience if the platform offers a bulk tool.
- Decide whether you want a private account at all. On many services this means people must request to follow you.
- Check what your profile shows to non-followers: photo, bio, friend list, location, birthday and workplace.
- Review who can see lists of people you follow or who follow you, since those connections reveal a lot.
2. Discoverability
- Decide whether people can find you by email address or phone number. Turning this off reduces unwanted lookups.
- Control whether search engines can link to your profile, where the platform provides this option.
- Check whether the service suggests your account to people who have your contact details in their address books.
3. Contact, tags and mentions
- Limit who can send you direct messages, or route messages from strangers to a separate requests folder.
- Require approval before tags appear on your profile.
- Restrict who can comment on your posts, and know how to block and report accounts.
4. Location and metadata
- Turn off automatic location tagging on posts and stories.
- Be careful with live location sharing, and use time limits where possible.
- Remember that photos can carry location data in their file details. Many platforms remove it on upload, but not all do, so check your camera settings.
- Avoid posting in real time from home when you are away, or from a regular routine location.
5. Connected apps and logins
- Open the list of third-party apps and websites linked to your account and remove any you do not use.
- For each remaining app, check what it can read or post. Our guide to app permissions explains how to judge this.
- Be cautious with quizzes and games that ask for broad access to your profile.
- Think twice about using a social account to sign in elsewhere, since that links services together.
6. Ads and data use
- Find the advertising or personalisation controls and limit the use of your activity from other sites and apps where an option exists.
- Review interests the platform has assigned to you and remove the ones that are wrong or too personal.
- Look for data download and activity-history tools, and clear what you do not want kept.
- Opt out of using your posts or photos for features you are uncomfortable with, if the service offers a setting. Terms vary, so read the policy for details.
7. Account security
- Use a unique, strong password, ideally stored in a password manager.
- Enable two-step sign-in. See our two-factor authentication guide for the options.
- Review logged-in devices and sessions and sign out of any you do not recognise.
- Check the recovery email and phone number are current and that you control them.
- Turn on login alerts so you hear about unfamiliar sign-ins.
Content-sharing habits that settings cannot fix
Settings control who sees a post, but they cannot control what a viewer does with it. Screenshots exist, and a private account can still be shared by a friend. Treat every post as something that could travel further than you intended. A few habits help:
- Do not post boarding passes, tickets, documents or house keys, even partially covered.
- Avoid sharing details used for security questions, such as a pet’s name, school or mother’s maiden name.
- Think about other people. Ask before posting photos of friends, and be especially thoughtful about children.
- Keep work and personal accounts apart, and follow your employer’s rules about what can be shared.
When the platform changes the rules
Terms, defaults and menus change over time, so a setting you chose once may not stay as it was. Skim notices about policy changes from the platforms you use, and repeat this checklist every few months. If a new feature is switched on by default, ask whether you need it before leaving it active.
Platform settings also form only part of the picture. Sites that embed social buttons can still follow you around, as described in how websites track you, so combine these settings with browser protections.
Where to start
If time is short, do three things first: set the default audience to friends or followers, remove connected apps you do not use, and turn on two-step sign-in. Then return for the rest. Our Online Privacy section has more guides to follow up with.
Frequently asked questions
Is a private account enough to stay safe?
It helps by limiting who sees your posts, but followers can still share or screenshot them. Keep sensitive details off the platform entirely.
How often should I check my settings?
Every few months, and after major app updates. Defaults and menus can change without much notice.
Should I delete old posts?
Consider it for posts that reveal personal details or no longer reflect you. Many platforms let you restrict or bulk-delete older content.
Do these settings stop advertisers from tracking me?
They reduce what the platform shares and uses, but tracking on other websites continues. Pair them with browser tracker protection.
