Social Media Privacy Settings: Lock Down Every Platform in 2026

Disclosure: Some links in this article may be affiliate links. If you make a purchase through them, I may earn a small commission at no extra cost to you.

Photo by Pixabay — Pexels

A colleague of mine got denied a job last year. Not because of her resume or interview performance — the hiring manager found a six-year-old Facebook post where she'd vented about a former employer. She didn't even remember posting it. The post was technically "public" because she'd never bothered to check her default privacy settings.

Social media companies make money by getting you to share as much as possible. Every photo, check-in, like, and comment feeds the advertising machine. Your privacy settings are intentionally buried and defaulted to "share everything." And every few months, they seem to reset or redesign the privacy menu so you have to figure it out all over again.

I'm not going to tell you to delete all your social media accounts. That's not realistic for most people. But I will show you exactly which settings to lock down on each major platform — and what to stop doing immediately.

What Social Media Companies Actually Know About You

Before we get into settings, let's talk about the scale of data collection. This isn't paranoia — it's their own documentation.

Facebook/Meta collects: your location history (even when you're not using the app), contacts from your phone, facial recognition data from photos, browsing activity on sites with Facebook Pixel installed (which is millions of websites), and detailed profiles of your interests, political views, and purchase behavior. In 2023, Ireland's Data Protection Commission fined Meta €1.2 billion for transferring EU user data to the US without adequate protections.

Instagram (owned by Meta) tracks which posts you linger on, which Stories you watch fully, who you DM most, and what times you're active. This feeds their recommendation algorithm — and their ad targeting.

TikTok collects keystroke patterns, clipboard contents (they got caught doing this in 2020), device identifiers, and extensive behavioral data. Their algorithm is famously good at predicting your interests, which should tell you something about how much data it's using.

X/Twitter tracks your interactions, who you follow, what you search for, and links you click. Under new ownership, the privacy policy has become less restrictive for the company and more permissive about data sharing.

LinkedIn knows your career history, connections, skills, and who's been looking at your profile. They also track your activity across the web using LinkedIn Insight Tag — their version of the Facebook Pixel.

Platform-by-Platform Privacy Lockdown

Facebook / Meta

Facebook has the most granular privacy settings of any platform — which is both good (you can control a lot) and bad (it takes forever to go through everything). Here are the critical ones.

1. Settings → Privacy → Who can see your future posts? → Change to "Friends" (not "Public" or "Friends of Friends")
2. Limit past posts: Settings → Privacy → "Limit the audience for posts you've shared with friends of friends or Public" → click "Limit Past Posts." This bulk-changes all your old public posts to Friends-only.
3. Settings → Privacy → Who can look you up by phone/email? → Set to "Friends" or "Only Me"
4. Settings → Privacy → Search engine indexing → Turn OFF "Allow search engines outside of Facebook to link to your profile"
5. Settings → Apps and Websites → Review and remove any apps you no longer use. Each one has some level of access to your data.
6. Off-Facebook Activity: Settings → Your Facebook Information → Off-Facebook Activity → "Clear history" and "Manage future activity" → disconnect. This stops Facebook from linking your browsing on other websites to your profile.

That last one is huge. Most people don't know Facebook tracks you across the internet, not just on Facebook itself.

Photo by Bastian Riccardi — Pexels

Instagram

1. Switch to Private Account: Settings → Privacy → Account Privacy → toggle on "Private Account." Only approved followers can see your posts. This is the single most impactful change.
2. Disable Activity Status: Settings → Privacy → Activity Status → toggle off. This stops people from seeing when you were last online.
3. Restrict Story Sharing: Settings → Privacy → Story → turn off "Allow Sharing" and "Allow sharing to messages"
4. Review tagged photos: Settings → Privacy → Tags → toggle on "Manually Approve Tags"
5. Limit data for ads: Settings → Accounts Center → Ad Preferences → "Ad Settings" → toggle off all personalization options

One thing I notice: even with a private account, your profile photo, bio, and username are still publicly visible. Be mindful of what you put there.

X / Twitter

1. Protect your tweets: Settings → Privacy and Safety → Audience and Tagging → check "Protect your Tweets." Only followers will see your posts. This is drastic — retweets won't work — but it's the only way to truly limit your audience.
2. Disable location tagging: Settings → Privacy and Safety → Location Information → uncheck everything, and "Delete all location data" if available
3. Turn off personalized ads: Settings → Privacy and Safety → Ads preferences → uncheck "Personalized ads"
4. Disable discoverability: Settings → Privacy and Safety → Discoverability → uncheck "Let people who have your email/phone find you"
5. Review connected apps: Settings → Security and Account Access → Apps and Sessions → revoke access for anything you don't recognize

TikTok

1. Private account: Settings → Privacy → toggle on "Private Account"
2. Disable "Suggest your account to others": Privacy → uncheck all three options under this heading
3. Turn off ad personalization: Settings → Privacy → Ads → toggle off "Ad personalization"
4. Restrict downloads: Settings → Privacy → toggle off "Allow your videos to be downloaded"
5. Limit comments and messages: Set both to "Friends" or "No one" if you don't need public interaction

LinkedIn

1. Profile viewing options: Settings → Visibility → "Profile viewing options" → switch to "Private mode" if you don't want people seeing you viewed their profile (trade-off: you can't see who viewed yours either)
2. Edit your public profile: Settings → Visibility → "Edit your public profile" → turn off sections you don't need publicly visible
3. Disable data sharing for ads: Settings → Advertising data → toggle off all options
4. Turn off "Connections" visibility: Settings → Visibility → "Who can see your connections" → "Only you"

Photo by Pixabay — Pexels

7 Things to Stop Doing on Social Media Today

Settings only protect you so far. Your behavior matters just as much.

1. Stop posting your location in real time. Checking in at a restaurant or airport tells everyone — including people you don't know — exactly where you are right now. Post about it after you leave, if at all.

2. Stop using "Log in with Facebook/Google" on random sites. Every site you log into this way gets access to your profile data and creates a link between that service and your social media account. Use email login or a password manager to generate unique credentials instead.

3. Stop taking those "fun" quizzes. "What's your spirit animal?" or "Which city should you live in?" — these quizzes are designed to harvest your data. Remember Cambridge Analytica? It started with a personality quiz app.

4. Stop sharing photos of tickets, badges, or IDs. Concert tickets have barcodes. Boarding passes contain booking references. Work badges have your full name and employer. People have had flights stolen and identities compromised from seemingly harmless photos.

5. Stop accepting every friend/follow request. A percentage of friend requests come from fake accounts created for data harvesting or social engineering. If you don't know the person, don't accept.

6. Stop ignoring app permissions. Does Instagram really need access to your contacts and microphone? Check what permissions each social media app has on your phone (Settings → Apps on Android, Settings → Privacy on iOS) and revoke anything unnecessary.

7. Stop using the same password across platforms. If one platform gets breached, all your accounts with that same password are exposed. A password manager solves this, and two-factor authentication adds a crucial second layer of defense.

The "Digital Footprint" Problem

Everything you post creates a permanent record. Even "disappearing" content on Snapchat or Instagram Stories can be screenshotted, cached by web crawlers, or stored in platform backups. The Wayback Machine has archived public social media pages. Deleted doesn't always mean gone.

I periodically go through my old posts — about once every six months — and delete anything I wouldn't be comfortable with a future employer, client, or stranger reading. It's tedious, but it's worth it. Some platforms offer tools to bulk-delete (or you can find third-party tools for this, though use them carefully).

FAQ: Social Media Privacy

Should I just delete my social media accounts?

That's the nuclear option, and it's not practical for most people. Social media is how many of us stay connected with family, network professionally, and stay informed. The better approach is to tighten your settings, be intentional about what you share, and periodically audit your profiles.

Can employers legally look at my social media?

In most countries, yes — anything publicly visible is fair game. Some US states have laws preventing employers from asking for your social media passwords, but they can absolutely look at your public posts. This is exactly why your default posting audience should be "Friends," not "Public."

Does going private hurt my reach or follower growth?

On personal accounts, I'd argue privacy should come first. On business or creator accounts, it's a trade-off — you need public visibility to grow. The solution: keep personal and professional accounts separate, with different privacy levels.

Are messaging apps within social media platforms private?

Generally, no. Facebook Messenger, Instagram DMs, and Twitter DMs are not end-to-end encrypted by default (Messenger added opt-in E2EE in late 2023 and made it default in 2024, but group chats still vary). For truly private conversations, use Signal or WhatsApp (which uses Signal's protocol).

Take 15 Minutes Today

Pick one platform — whichever you use most — and go through the settings I listed above. It'll take about 15 minutes. Then do another platform tomorrow. Within a week, you'll have locked down all your accounts.

Your social media profiles are a public-facing window into your life. How much of your life is visible through that window is entirely up to you. The platforms won't protect your privacy by default — they profit from the opposite. So it's on you to draw the line.

For a broader look at protecting all your personal data online, check our full privacy guide. And make sure your accounts are secured with strong, unique passwords and phishing awareness — because the best privacy settings in the world don't help if someone just logs into your account.