Using Social Media Without Oversharing
Social media is a highlight reel for your friends and a research file for everyone else. The same posts that keep you connected also feed identity thieves, burglars, social engineers, and the quiz apps that harvest the answers to your security questions. You don't have to leave — you have to post like the audience is bigger and less friendly than it looks.
The account is a target
A hijacked social account is used to scam your friends ("I'm stuck abroad, send money"), harvest your contacts, and pivot into your email. Lock it down like it holds money, because socially it does:
- Unique password and MFA on every platform (see Passwords, Passkeys, and MFA).
- Review connected/third-party apps and revoke ones you don't use — each is a door.
- Know the platform's account-recovery process before you're locked out.
What not to hand over for free
The classic security questions — first pet, street you grew up on, mother's maiden name, first car — are exactly what those "fun" quizzes and "getting to know you" chains collect. So is your birthday (day, month, and year is a building block of identity theft). Treat any prompt that mines biographical trivia as reconnaissance, because for someone it is.
Location and timing: the burglar's feed
Real-time vacation posts announce an empty house. Geotags reveal your home, your gym schedule, your kid's school. The fix costs nothing: post the trip after you're back, turn off automatic geotagging, and scan photos for accidental leaks — house numbers, license plates, mail, the view from your window, screens with visible information.
Curate the audience, but assume it leaks
Set profiles to private, review who can see and tag you, and prune your follower list occasionally. But remember what privacy settings actually do: they limit which users see a post — not the platform, not a screenshotting "friend," not a future employer who knows someone. The durable rule is upstream of any setting: if a post would be a problem shared with the whole world, don't post it. The internet's memory is long and its copy button is instant.
Spotting manipulation in the feed
- Impersonation and cloned accounts — a "friend" who suddenly re-adds you and asks for money or a code is a scammer wearing their photo. Verify off-platform.
- Giveaway and investment scams — "DM to claim," celebrity crypto doublers, and too-good marketplace deals are phishing with better production values.
- Emotional bait — rage-inducing or too-perfect content is engineered to make you share before you think. Pausing is a security skill.
Stop feeding the quiz that wants your first pet's name. Think about the burglar, the recruiter, and the scammer reading along. Connect your privacy settings, then post as if they didn't exist.