Why the settings matter
Most social platforms start new accounts with fairly open defaults, because sharing is how the services grow. That does not mean the defaults are wrong for you, but it does mean they were not chosen with your situation in mind. A few minutes spent reviewing your settings can reduce the number of strangers who can read your posts, find your profile or collect details about your life.
Settings screens change often, and every platform names things differently. So this guide describes the categories of controls that most services provide and what to look for in each, rather than exact menus. If a setting below is not on your platform, it may simply be handled in a different place or not offered at all. This is general information, not advice tailored to your circumstances.
Audience: who can see what you post
The audience control is the most important one. Many services let you choose between a fully public audience, a limited audience such as approved followers or friends, and a very small or custom group. Some let you set a default for future posts and also change the audience of individual posts afterward.
Things worth checking:
- The default audience for new posts and stories.
- Whether older posts remain public after you tighten your settings. Many platforms offer a bulk option to limit past posts.
- Whether your profile details, such as your workplace, school, hometown or birthday, have their own audience controls separate from your posts.
A reasonable starting point for most people is to share with people they actually know and to make something public only on purpose. Public accounts are normal for creators and businesses, but they work best when the person has thought about what is being shown. The risks of putting too much in front of a wide audience are covered in more detail in the piece on oversharing risks.
Discoverability: who can find you
Separate from who can see your posts is who can find your account in the first place. Typical controls include:
- Whether people can look you up by email address or phone number.
- Whether your profile appears in search engines outside the platform.
- Whether the service suggests your account to others, for example as a person they may know.
- Whether your contacts, once uploaded, are used to build those suggestions.
Turning off search-engine indexing and lookup by phone number can make it harder for someone with only a scrap of information about you to locate your profile. If you want a different level of privacy for each part of your life, using separate email address aliases for different accounts also makes it harder to connect them.
Tagging and mentions
Tagging controls decide whether other people can attach your name to their photos and posts, and whether those tags show up on your profile. Common options include approving tags before they appear, limiting who can tag you, and limiting who can see your friends or followers list. These controls are important because other people’s posts about you are outside your direct control. A separate article covers tagging controls and the friends list in more detail.
Messages and contact
Most platforms let you control who can send you direct messages, who can add you as a friend or follow you, and whether messages from strangers go to a separate folder or are blocked. Tightening these settings reduces unwanted contact, which matters for everyone and especially for younger users. If messages from strangers are allowed, it helps to treat unexpected links and requests with caution, since many phishing messages and online scams begin with a friendly direct message.
Data, ads and activity
This category covers what the platform itself collects and how it uses it. You will often find:
- Ad personalization controls, which affect whether your activity is used to choose the ads you see.
- Activity or history logs showing what you have searched, viewed or clicked.
- Options to limit data shared with partners or collected from other sites and apps.
- A way to request a copy of your data, which is useful when you want to understand what is held about you or when you plan to close an account.
These controls rarely switch collection off entirely. They usually limit certain uses of the data, so it is sensible to expect that some collection continues. Your wider digital footprint includes more than any single profile.
Connected apps and logins
Over time you may have used a social account to sign in to games, quiz sites and other services. Each one may keep some level of access to your profile. A good habit is to review this list now and then and remove anything you no longer use. The article on connected app access goes through that review.
Security settings
Privacy and security overlap. Look for:
- Two-step sign-in, which asks for a second proof of identity when you log in.
- A list of devices and sessions currently signed in, with the option to sign out of ones you do not recognize.
- Login alerts that warn you about sign-ins from new devices.
- Recovery options such as a backup email address or phone number, kept up to date.
A strong, unique password stored in a password manager is the base for all of this, because password reuse is a common way accounts are taken over. If something looks wrong, our material on account takeover signs explains what to watch for.
Location and media
Many apps can attach your location to posts or check you in at places. Review whether location sharing is on by default, and consider turning it off for the app unless you have a specific reason to use it. Photos can also carry hidden details, a topic covered under photo location data.
Making a review routine
You do not need to change everything at once. A practical approach is:
- Start with audience and discoverability, since they have the largest effect.
- Check tagging, messages and connected apps.
- Turn on two-step sign-in and review signed-in devices.
- Look at your old posts and profile details and decide whether they still reflect what you want visible.
- Set a reminder to check again every few months, and whenever a platform announces a policy or design change.
After a major update, defaults for new features are sometimes switched on, so a quick look is worthwhile. No setting makes anything fully private: other people can still screenshot or repeat what you share with them. The most dependable privacy control is deciding what to post in the first place.