Social Media Safety: Protecting Your Accounts
Social media is fun and useful, but it is also where attackers research their targets and where account takeovers happen. Small changes to your settings and habits go a long way.
Why oversharing is risky
The details you post, your birthday, pet’s name, workplace, travel plans, are exactly what scammers use to guess passwords, answer security questions, craft convincing phishing, or know when your home is empty.
- Avoid posting full birthdates, addresses, and real-time travel plans.
- Be careful with quizzes and "fun" surveys that harvest personal facts.
- Assume anything you post can become public and permanent.
Lock down your accounts
Protect the accounts themselves:
- Use a unique, strong password for each social account.
- Turn on multi-factor authentication (MFA).
- Review privacy settings and limit who can see your posts and details.
- Check active sessions and connected apps, and remove ones you do not recognize.
Common social media scams
Stay alert to these:
- Account takeover, then messages to your friends asking for money or codes.
- Fake giveaways and "verify your account" links.
- Impersonation of brands, celebrities, or people you know.
- Romance and investment scams that start with a friendly DM.
How it plays out in the real world
Based on real, widely reported incident patterns; names and details are illustrative.
Your rockstar name is your bank's security question
A viral post asked: "Your rockstar name = your first pet + the street you grew up on! Drop yours below." Thousands replied. Both answers are among the most common account-recovery security questions used by banks and email providers.
Scrapers collect these threads and pair them with the names and birthdays already visible on profiles. Months later, "forgot password" flows start succeeding against accounts whose owners handed over the answers for fun.
- Fun quizzes are recovery-question harvesters. First pet, first car, mother's maiden name, childhood street: if a game asks for them, it is farming credentials. Do not play.
- Your profile is a dossier. Birthday, hometown, school, and pet names together answer most identity checks. Lock profiles down and share less than feels natural.
- Lie to security questions. Treat recovery answers as passwords: invented, unique, and stored in your password manager, not in your biography.
Test yourself
Test your social media safety, free.
Frequently asked questions
Why would a scammer want my social media account?
A hijacked account lets them scam your friends and family (who trust you), harvest personal data, and reuse your password on other sites. Your account has real value to them.
What should I do if my account is hacked?
Change the password immediately (and anywhere you reused it), enable MFA, remove unknown connected apps and sessions, and warn your contacts not to trust recent messages from you.
Are those personality quizzes really a risk?
They can be. Many are designed to collect personal details, the same facts used for security questions and targeted phishing. Be cautious about what you share.