A 20-Minute Social Media Privacy Checkup

Updated 26 September 2026 · 5 min read

You do not need a weekend, a specialist, or a new personality to tighten social media privacy. You need twenty focused minutes, twice a year, on each account you still use. This checkup walks through who can see posts, what to hide on a profile, location and photo extras, tagging, old posts, connected apps, and two-factor authentication. Menus move. Look for words like privacy, audience, permissions, security, or apps — then confirm on the platform’s official help pages.

The point is not to disappear. It is to make sure last year’s joke, a child’s photo, or your home map is not traveling farther than you meant. If you share devices with kids, pair this with a calmer parent conversation about social media.

Minute 1–4: who can see new posts

Open the audience or privacy setting for future posts. Typical choices are public, friends or followers, close friends, or only you. Public means strangers, search engines, and anyone who screenshots. Friends-only still means every friend, including the one you have not spoken to in a decade.

Decide a default that matches how you actually live:

Public only if you treat the account as a noticeboard
Friends or followers if it is a social life
A smaller list for family photos and anything that shows a school, a front door, or a travel plan

Then check stories, live video, and “people you may know” style discovery if those exist. A locked feed with public stories is not locked. Repeat on each app; they do not copy each other.

Minute 5–8: profile details worth hiding

Profiles leak more than posts. Walk the about section:

Phone number and personal email — remove or restrict who can see them
Birthday with year, hometown, workplace, school — enough to guess passwords or answer “security questions”
Current city, if you do not want acquaintances dropping by
Relationship status and family links, if those invite gossip or targeting
A public username that is also your email prefix or employee ID

Your profile photo can stay. A photo of your house number, your child’s school gate, or a boarding pass should not. If the account is for a small business, keep the public details that customers need and still lock the personal account you use at night.

Search for your own name in a browser logged out. If an old blog, a forum, or a people-search site is showing a number you forgot, that is part of the checkup too. You may not be able to delete everything; you can stop adding more.

Minute 9–12: location, photos, and tags

Location. Turn off automatic check-ins and precise location for apps that do not need it to work. Sharing “on holiday” in real time tells people the house may be empty. Share the sunset after you are home if you share it at all.

Photo extras. Phones often store where a picture was taken. Some apps strip that; some do not. Avoid posting images of documents, school IDs, parcel labels, or meeting badges. Crop maps and tickets.

Tags. Set review so you approve tags before they appear on your profile. Untag old photos you would not post today. Ask family not to tag children in public albums. If someone tags you at a mosque, a clinic, or a workplace you keep private, you can remove the tag without a fight — a short private message is enough.

Group photos of other adults deserve a pause. If you would not email the picture to everyone in it, do not post it publicly. The same courtesy shows up in group chat etiquette when people forward images without asking.

Minute 13–16: old posts and connected apps

You do not have to delete your whole history. You do have to glance at it.

Filter your posts by “public” if the app allows, and limit the audience on anything that assumed a smaller world
Remove or hide rants, old addresses, and photos of documents
Close or lock forgotten accounts from a hobby you left; an unused public profile is a gift to impersonators. If you find a fake copy of you, use the steps in spotting scams and fake profiles.

Then open connected apps, games, or “login with” permissions. Revoke anything you do not recognize or no longer use. Those connections can keep reading your profile long after you forgot the quiz you took. Repeat for browser extensions that claim to be social tools.

Download a copy of your data if the app offers it and you want an archive, then still tighten the live settings. An archive on your computer is not the same as a public timeline.

Minute 17–20: passwords and two-factor authentication

Use a unique password for each important account. If you have been recycling one phrase everywhere, change the email and the main social logins first. A password manager helps; a notebook in a drawer is better than the same password on every site.

Turn on two-factor authentication (2FA): a second step after the password, usually an app, a hardware key, or a code. Prefer an authenticator app or a key over SMS when you can, because phone numbers get recycled and SIM tricks exist. Save backup codes in a place that is not the same phone you might lose.

Check where you are logged in and sign out of old phones, hotel sessions, and “that tablet at Mum’s.” If a device looks wrong, change the password, then 2FA, then review connected apps again.

Repeat twice a year, and after life changes

Put a reminder in spring and autumn, or after you move, change jobs, get married, or a child joins an app. Followers accumulate. Settings reset after app redesigns. Twenty minutes is cheaper than an embarrassing screenshot in a workplace chat.

If you help an older relative, do the checkup with them, not for them in secret. Write what you changed on a card. Do not hide that their account exists; surprise lockdowns create new scams (“your nephew locked you out, send a code”).

Practical summary

Set a sensible default audience for posts, stories, and discovery.
Strip phone numbers, extra birthday data, and precise maps from the profile.
Stop live location, be careful with photo details, review tags.
Limit old public posts; revoke forgotten app connections.
Unique passwords, 2FA, sign out of stale devices.
Do it twice a year. Official help pages beat last year’s tutorial.

Privacy is not a personality. It is a door you remember to close.

General guidance only. App features and settings change often, so check each platform's official help pages. If someone is in danger, contact your local emergency services.