Hands holding a mug and a mobile phone.

Be aware of the information you’re sharing

Cyberthieves use this information to break into your online accounts or even your house. Follow the tips below to keep your posts confidential — and out of the reach of cyberthieves.

Think before you post

Cyberthieves use this information to impersonate you, reset your online accounts and steal your identity or money. Criminals may also use personal information, photos and public posts to create convincing scams, impersonate you online or target you with highly personalized phishing messages.

  • Don’t post information relating to common website authentication questions such as birthdate, high school or your mother’s maiden name
  • Don't post your email address or phone number on your profile
  • Realize that the pictures you post online could tell others exactly where you and your family live, work and play
  • Be mindful that photos and videos may unintentionally reveal sensitive information, such as addresses, license plates, workplace details, school information or travel plans
  • Resist the "I’m going on vacation" social media announcements before your trip. Consider waiting until after a trip to share photos and updates that indicate your home may be unattended
  • Disable location services for your social media apps if you don’t want your exact location to be captured and shared every time you tweet or post something new

Follow these tips

Control visibility and privacy
Review the settings to learn who can see your profile and posts and adjust the settings to match your comfort level for sharing your information. Review who can see your friends list, photos, contact information and profile details, and limit access to only those who need it.

Routinely check your settings
Social media services change features and settings all the time and may change who sees your posts. Regularly check your settings to make sure your personal information isn’t broadcast to the world.​​​​​​​ Social media platforms frequently introduce new features, privacy controls and sharing options. Periodically review your settings to ensure they continue to reflect your preferences.

Protect your accounts
Use a strong, unique password for each social media account and enable multifactor authentication (MFA) whenever available. MFA can help protect your account even if your password is compromised.

Be cautious of private messages
Cybercriminals increasingly use direct messages, friend requests and social media conversations to distribute malicious links, conduct scams and impersonate trusted individuals. Verify unexpected requests before responding, clicking links or sharing personal information.

Watch for AI-generated impersonation
Artificial intelligence (AI) can be used to create convincing fake profiles, images, videos and messages that appear to come from real people or organizations. Be cautious when interacting with unfamiliar accounts or unexpected requests, even if they appear legitimate.

Respond to a breach
Change your password immediately if you learn that a social media platform you use has experienced a security incident or if you suspect your account has been compromised. Also review recent account activity, enable MFA and update passwords on any other accounts where the same password may have been used.