Social Media Privacy Settings Checklist
Social platforms default toward "as public as possible" because public helps content spread. For you, the cost is that strangers can flip through your posts from three years ago, infer your address from a group-photo background, and find you directly by phone number. This is a checkable checklist: spend twenty minutes once, then re-review every six months.
One: First, View Yourself as a Stranger
Before changing anything, log out or open your profile in a private window. You will directly see what outsiders can see — avatar, nickname, bio, old posts, likes, follow relationships. This ranks your priorities far better than guessing against a settings menu, and it often surprises people how much is exposed.
Two: Content Visibility
Highest-weight part of the list:
- Limit old posts in one click: most platforms offer "show only last 3 days / month / 6 months" or "bulk edit visibility of old content." Old content often reveals your old school, company, and hangouts — lowest value, highest risk.
- Default posting scope: set new posts to "friends" or a specific group; open up only when needed, more reliable than remembering to lock each time.
- Groups or tags: separate colleagues, clients, and relatives; exclude specific groups when posting.
- Likes, favorites, follow lists: often public by default and reveal interests and relationships; set private.
- Comments: turn off "allow stranger comments" or enable "comment review."
- Turn off find me by phone number.
- Turn off find me by email.
- Turn off recommend to contacts / people you may know. When on, the platform recommends you to anyone holding your number, including near-strangers.
- Turn off sync contacts and revoke contact access in permissions. Uploaded contacts can usually be cleared in settings.
- Check whether your profile is indexed by search engines; some platforms have an "allow search engines to index my profile" switch.
- Turn off auto-location when posting; add it manually only when truly needed, and prefer a broad landmark over a specific door number.
- Do not livestream your itinerary. Post trip photos after you are home.
- In photos, watch for school uniforms, work badges, door numbers, license plates, shipping labels; crop or cover before posting. Cover with an opaque block, not blur or mosaic, which can sometimes be partially reconstructed.
- Original photos may carry location metadata. Most platforms strip it on upload, but sending via chat as "original/file" usually keeps it — be careful forwarding to casual acquaintances.
- Go to Settings → Account & security → Authorizations / connected apps.
- Review what each app gets (nickname, avatar, friend list, posting rights).
- Unbind everything you no longer use, especially apps unopened in a year.
- For kept apps, check for risky "post on your behalf" rights.
Three: How Others Find You
Limiting discovery paths beats deleting content afterward:
Four: Location and Hidden Info in Photos
Location leaks often are not from active check-ins:
Five: Third-Party Authorization and Login
One-tap login with a social account is convenient but hands over some data:
Also review the logged-in devices list and remove strangers and old phones.
Six: The Checklist You Can Follow Directly
[ ] Viewed your public profile in a private window
[ ] Old posts set to visible within 3 months
[ ] New posts default to "friends"
[ ] Likes / follows / favorites set private
[ ] Phone and email search turned off
[ ] Contact sync and friend recommendation turned off
[ ] Auto-location turned off
[ ] Cleared third-party authorizations, removed strange devices
[ ] Stranger DMs off or set to verified-only
[ ] Avatar and nickname contain no real name or employer
Seven: Notes
Privacy settings are not one-and-done: after platform updates, new features often default on, so re-run this list every six months, especially after a major app version. Settings only limit visibility inside the platform — content already screenshotted or forwarded cannot be recalled. The final defense is thinking three seconds before posting.
Common Questions
Why view my profile as a stranger first? It shows exactly what outsiders see — old posts, likes, follow lists — and tells you what to fix first, better than guessing against a settings menu.
Should I limit old posts? Yes. Bulk-limit history to the last few months; old content reveals your old school, company, and hangouts while having the least value and highest risk.
Turn off find-by-phone and find-by-email? Yes. These let strangers reach your profile directly; disabling them is a cheap, high-value change.
How careful with location in photos? Very. Turn off auto-location, do not livestream itineraries, and cover school uniforms, badges, plates, and shipping labels. Original photos can carry location metadata that survives some transfers.
What about third-party app authorizations? Review and revoke everything you no longer use, especially apps unopened in a year, and remove strange devices from the login list.
Is this a one-time setup? No. After platform updates, new features often default on, so re-run the checklist every six months, especially after a major version.
Risk Tips
Do not assume a "close friends" list is truly private if those friends have public profiles — they can reshare. Be cautious with quizzes and "personality test" apps that request broad permissions; they are common data harvesters. Review authorizations after any platform redesign, since permission scopes can silently expand. If you run a public account for work, separate it from your personal profile so private life stays shielded, and never reuse the same username pattern that links the two accounts together in a search.