Platform Security

Secure All 6 Social Media Accounts

Introduction

This tutorial covers security settings and best practices for all 6 major social media platforms. Whether it's a Meta platform (Facebook, Instagram), a messaging app (WhatsApp, Telegram), or a professional/public network (LinkedIn, X/Twitter) — the core security principles remain the same: strong passwords, 2FA, privacy controls, and regular monitoring.

In this tutorial, you will learn:

• Security features of all 6 platforms
• Step-by-step settings for each platform
• Common threats and how to avoid them
• Comparison tables to understand differences
• Unified security checklist for all platforms

Table of Contents

1. Facebook Security
2. Instagram Security
3. WhatsApp Security
4. Telegram Security
5. LinkedIn Security
6. X (Twitter) Security
7. Cross-Platform Security Comparison
8. Unified Security Best Practices
9. Complete Security Checklist

Facebook Security

1.1 Use a Strong Password

Create a unique and complex password to protect your Facebook account from unauthorized access.

• Use a unique password that you do not use on any other site
• Include a mix of uppercase, lowercase, numbers, and symbols
• Keep your password at least 12 characters long
• Example: MyN@me!sRahul2024#Safe

1.2 Two-Factor Authentication (2FA)

Add an extra layer of security to your Facebook account beyond just a password.

Settings & Privacy → Settings → Security and Login → Two-Factor Authentication → Edit

2FA options:

💡 Recommendation: Use an Authentication App (more secure than SMS).

1.3 Login Alerts

Receive instant notifications when someone logs into your Facebook account from a new device.

Settings → Security and Login → Get alerts about unrecognized logins → Edit

You will receive an alert whenever someone logs into your account from a new device or browser.

1.4 Manage Recognized Devices

Review and manage all devices currently logged into your Facebook account.

Settings → Security and Login → Where You're Logged In

• View all active sessions
• Log out of any unknown device
• Check device location and login time

1.5 Facebook Privacy Settings

Profile Privacy

Control who can see your posts and activity on your Facebook profile.

Settings → Privacy → Your Activity

• Who can see your future posts? → Friends (recommended)
• Review posts you're tagged in → Enabled
• Limit past posts → Friends

How People Find You

Control how people can find and connect with you on Facebook.

Settings → Privacy → How People Find and Contact You

Timeline and Tagging

Control who can post on your timeline and tag you on Facebook.

Settings → Timeline and Tagging

• Who can post on your timeline? → Friends
• Review tags before appearing? → Enabled
• Tag suggestions? → OFF

1.6 Facebook Profile Lock

Lock your Facebook profile to restrict what non-friends can see on your account.

Profile → ... (Three dots) → Lock Profile

After locking:

• Only friends can see your profile photo
• Non-friends cannot see your timeline
• A "Locked" badge appears on your profile

1.7 Facebook Account Recovery Setup

Set up recovery options to regain access to your Facebook account if locked out.

Settings → Security and Login → Ways We Can Reach You

• Add a recovery email (separate from your login email)
• Add and verify your phone number
• Set up trusted contacts (3-5 trusted friends)
• Save backup codes offline

Instagram Security

2.1 Strong Password and 2FA

Use a strong password and enable two-factor authentication for your Instagram account.

Settings → Security → Password
Settings → Security → Two-Factor Authentication

2FA Setup:

Settings → Security → Two-Factor Authentication → Get Started
→ Choose: Authentication App / Text Message / WhatsApp

2.2 Check Login Activity

Review all devices and locations where your Instagram account is currently logged in.

Settings → Security → Login Activity

Here you can see:

• Device type (iPhone, Android, Windows, etc.)
• Location (city and country)
• Time of login
• Unknown device? → Remove it immediately

2.3 Private Account vs Public Account

Private Account (Recommended for personal use)

Switch to a private Instagram account so only approved followers can see your content.

Settings → Privacy → Account Privacy → Private Account → Toggle ON

Benefits:

• Only followers can see your posts
• New followers require your approval
• Posts do not appear in public hashtag searches

Public Account

• Anyone can see your posts
• Anyone can follow you
• Suitable for business or creator accounts

2.4 Instagram Privacy Settings

Story Settings

Configure who can view and interact with your Instagram stories.

Settings → Privacy → Story

Post Interactions

Control who can comment on, tag, and mention you in Instagram posts.

Settings → Privacy → Posts

• Comments → Control who can comment
• Tagging → Manual approval for tags
• Mentions → Only from followers

Direct Messages

Control who can send you direct messages on Instagram.

Settings → Privacy → Messages

• Message Controls → Who can send you messages
• Restricted Accounts → Silently restrict unwanted accounts

2.5 Close Friends Feature

Create a private list of trusted people to share Instagram stories with selectively.

Profile → Close Friends → Create List

Only add trusted people to this list for sharing private stories.

2.6 Block and Restrict Features

Control unwanted interactions by blocking or restricting other Instagram users.

Block:

• Blocked person cannot see your profile, posts, or stories
• They will not find you in search

Restrict (Soft Block):

• Restricted person's comments are visible only to them
• Their messages go to Requests
• They cannot see your online status

Profile → Three dots → Block / Restrict

2.7 Instagram Account Recovery

Follow these steps to regain access to your Instagram account if locked out.

Login Screen → "Forgot password?" → Enter username/email/phone
→ Recovery link sent to email → Reset password

If locked out:

Login → "Need more help?" → "I can't reset my password"
→ Enter email and full name → Instagram sends recovery steps

Selfie Verification (last resort):

• Upload a selfie holding paper with the code provided
• Instagram verifies your identity
• Recovery link sent to your email

WhatsApp Security

3.1 WhatsApp Security Model

WhatsApp uses End-to-End Encryption (E2EE) by default for all chats:

Sender → 📱 Encrypted → 📡 → Encrypted → 📱 Receiver
         (Only sender & receiver can read messages)

Key Features:

• Default E2EE: Every message, call, photo, and video remains encrypted
• Signal Protocol: Industry-standard encryption protocol
• No third-party access: Even WhatsApp cannot read your messages

3.2 Important WhatsApp Settings

Privacy Settings

Configure who can see your personal information and activity on WhatsApp.

Settings → Account → Privacy

Two-Step Verification

Add a PIN and recovery email to protect your WhatsApp account from unauthorized access.

Settings → Account → Two-Step Verification → Enable
→ Set 6-digit PIN
→ Add recovery email

💡 Don't skip the recovery email — without it, you will have to wait 7 days to reset your PIN!

Security Notifications

Get notified when your WhatsApp account is registered on a new device.

Settings → Account → Security Notifications → ON

You will be notified if someone registers your WhatsApp on a new device.

3.3 WhatsApp Security Code Verification

Verify that your WhatsApp chats are end-to-end encrypted with the right person.

Open Chat → Contact Name → Encryption → Verify Security Code

Methods:

1. QR Code Scan — Scan the QR code on the other person's phone
2. 60-digit number — Compare numbers on both phones

3.4 WhatsApp Disappearing Messages

Set messages to automatically delete after a chosen time period in WhatsApp.

Open Chat → Disappearing Messages → 24 hours / 7 days / 90 days

Benefits:

• Chats auto-delete after the set time
• Useful for sensitive conversations
• Data stays safe if phone is lost or stolen

3.5 WhatsApp Block & Report

Block and report unwanted contacts to prevent further communication on WhatsApp.

To block: Open Chat → Contact Name → Block → Block Contact To report: Open Chat → Contact Name → Report Contact → Report & Block

3.6 WhatsApp Linked Devices

View and manage all devices connected to your WhatsApp account.

Settings → Linked Devices

• Check which devices are linked to your account
• Unknown device? → Log Out immediately
• WhatsApp Web sessions are also managed here

3.7 Common WhatsApp Scams

Learn to recognize and avoid common scams targeting WhatsApp users.

3.8 WhatsApp Account Recovery

Follow these steps to recover your WhatsApp account after losing access.

Re-registration (same number):

WhatsApp → Enter phone number → Verify via SMS/call
→ Enter OTP → Account restored (if backup exists)

Lost SIM Recovery:

Step 1: Get new SIM from operator (same number)
Step 2: Install WhatsApp → Verify via SMS
Step 3: Enter Two-Step Verification PIN
→ If PIN forgotten: Wait 7 days to reset

Telegram Security

4.1 Telegram Security Model

Telegram offers two types of chats:

Important: Default chats are NOT Secret Chats — you must manually start a Secret Chat for E2EE!

4.2 Starting a Secret Chat

Start an end-to-end encrypted chat on Telegram with additional privacy features.

User Profile → Three Dots → Start Secret Chat

Secret Chat Features:

• End-to-End Encrypted
• Self-Destruct Timer (1 second to 1 week)
• No Forwarding allowed
• Screenshot detection (Android)
• Available only on 2 devices

4.3 Telegram Privacy Settings

Configure who can see your personal information and contact you on Telegram.

Settings → Privacy and Security

4.4 Telegram Passcode & Face ID

Add a passcode or biometric lock to secure the Telegram app on your device.

Settings → Privacy and Security → Passcode Lock

• Enable Passcode Lock
• Set Auto-lock (1 minute recommended)
• Enable Face ID / Fingerprint if available

4.5 Telegram Two-Step Verification

Add a cloud password and recovery email for extra Telegram account security.

Settings → Privacy and Security → Two-Step Verification → Set Password

Setup:

1. Set a cloud password
2. Add a recovery email
3. Set a password hint

4.6 Active Sessions

View and manage all devices currently logged into your Telegram account.

Settings → Privacy and Security → Active Sessions

• Check which devices are active
• Terminate All Other Sessions regularly
• Immediately terminate unknown sessions

4.7 Telegram Bot Safety

Follow safe practices when interacting with bots on Telegram to protect your data.

Safe Bot Practices:

• Only use verified bots (blue checkmark)
• Do not give personal information to bots
• Do not make a bot a group admin
• Report suspicious bots

4.8 Telegram Channel Security

Apply security measures to protect your Telegram channel from unauthorized access.

• Use private channels for sensitive content
• Select channel admins carefully
• Enable forward restrictions
• Enable join requests for private channels

4.9 Telegram Account Recovery

Follow these steps to recover your Telegram account if you lose access.

Standard Recovery:

Telegram → "Start Messaging" → Enter phone number
→ Enter OTP from SMS → Account restored

Cloud Password Recovery:

Enter password → "Forgot password?"
→ Reset via recovery email
→ OR wait 7 days (if no email set)

Account Self-Destruct:

Settings → Privacy & Security → 
Delete my account if away for → 1 / 3 / 6 / 12 months

If you don't log in for the set period, your account auto-deletes.

LinkedIn Security

5.1 LinkedIn Security Features

LinkedIn protects your professional identity — connections, job history, and professional details.

Me → Settings & Privacy → Sign in & Security

5.2 Strong Password & 2FA

Use a strong password and enable two-step verification for your LinkedIn account.

Settings & Privacy → Sign in & Security → Two-Step Verification → Turn On

2FA Options:

• Authentication App (Recommended) — Google Authenticator, Microsoft Authenticator
• Text Message — OTP sent to your phone

💡 Recommendation: Use an Authentication App for better security.

5.3 Where You're Signed In

Check all active LinkedIn sessions and log out of unrecognized devices.

Settings & Privacy → Sign in & Security → Where you're signed in

• Check which devices/sessions are active
• Sign Out of unknown sessions
• Use session timestamps to detect suspicious activity

5.4 LinkedIn Privacy Settings

Profile Visibility

Control who can see your LinkedIn profile and contact information.

Settings & Privacy → Visibility

Profile Viewing Options

Choose how your name appears when you view other LinkedIn profiles.

Settings & Privacy → Visibility → Profile viewing options

💡 Tip: Job searching? Use "Private mode." Networking? Keep it "Public."

Job Seeking Privacy

Control whether recruiters and your network can see your job-seeking status on LinkedIn.

Settings & Privacy → Visibility → Change your job seeking preferences

• Let recruiters know you're open → ON (only recruiters see this)
• Share with your network → OFF (current employer won't see)

Data Privacy

Configure how LinkedIn uses your data for messaging, mentions, and platform improvement.

Settings & Privacy → Data Privacy

5.5 LinkedIn Blocking & Reporting

Block and report unwanted users to maintain a safe professional network on LinkedIn.

To block: Profile → Three dots → Block To report: Profile → Three dots → Report/Block → Select reason

5.6 LinkedIn Connection Safety

Follow safe practices when accepting connection requests on LinkedIn.

Safe Connection Practices:

• Only connect with known professionals
• Check mutual connections on unknown requests
• Scrutinize InMail messages
• Report & block fake profiles

Fake Profile Signs on LinkedIn:

• No profile photo or stock photo
• Very few connections (less than 50)
• Incomplete profile (no about section)
• Suspicious job title (too good to be true)
• Recently created account

5.7 LinkedIn Account Recovery

Follow these steps to regain access to your LinkedIn account if locked out.

Standard Recovery:

LinkedIn Login → "Forgot password?" → Enter email/phone
→ Send verification code → Enter code → Reset password

No Access to Email/Phone:

Forgot Password → "I don't have access to these"
→ Enter old email → Follow verification process
→ May need ID verification

Hacked Account:

linkedin.com/help → "Account compromised"
→ Report and follow recovery steps
→ LinkedIn support team assists

X (Twitter) Security

6.1 X (Twitter) Security Features

Access the main security settings panel for your X (Twitter) account.

Settings & Privacy → Security and account access

6.2 Password & 2FA

Use a strong password and enable two-factor authentication for your X account.

Settings & Privacy → Security and account access → Two-Factor Authentication

💡 Recommendation: Use an Authentication App or Passkey. SMS is vulnerable to SIM swap attacks.

6.3 Tweet Privacy

Control who can see your tweets and interact with them on X.

Settings & Privacy → Privacy and safety → Audience and tagging

Benefits of Protected Tweets:

• Only followers can see your tweets
• Cannot be retweeted
• Do not appear in search results
• New followers must be approved by you

6.4 Discoverability & Contacts

Control how people can find you on X using your email or phone number.

Settings & Privacy → Privacy and safety → Discoverability and contacts

6.5 Direct Message Security

Configure who can send you direct messages on X.

Settings & Privacy → Privacy and safety → Direct Messages

6.6 Location Information

Control whether location data is attached to your posts on X.

Settings & Privacy → Privacy and safety → Location information

6.7 Muting & Blocking

Control unwanted interactions by muting or blocking other users on X.

Mute: Profile → Three dots → Mute @username

• You won't see their tweets; they won't know they're muted

Block: Profile → Three dots → Block @username

• They cannot view your profile, follow you, or see your tweets

Advanced Filters: Settings → Privacy and safety → Mute and block

• Muted words — Filter specific words/topics
• Muted conversations — Avoid unwanted notifications
• Muted notifications — Filter low-quality replies

6.8 X (Twitter) Account Recovery

Follow these steps to regain access to your X account if locked out.

Standard Recovery:

X Login → "Forgot password?" → Enter email/phone/username
→ Send reset link → Click link → Reset password

Locked Account:

Email receives unlock instructions
→ Verify email/phone → Reset password
→ Review recent activity

No Access to Email/Phone:

"Forgot password?" → "Use alternative method"
→ Answer security questions (if set up)
→ OR provide account details for verification
→ X support reviews

Cross-Platform Security Comparison

7.1 2FA Methods Comparison

7.2 Default Encryption

7.3 Privacy Control Comparison

7.4 Common Scams by Platform

Unified Security Best Practices

8.1 The Universal Rules

Follow these essential security rules that apply to every social media platform.

✅ RULE 1: Strong, unique password for each platform (12+ characters)
✅ RULE 2: Two-Factor Authentication enabled wherever possible
✅ RULE 3: Privacy settings reviewed monthly
✅ RULE 4: Login activity checked regularly
✅ RULE 5: Unknown sessions terminated immediately
✅ RULE 6: Recovery email and phone always up to date
✅ RULE 7: Backup codes saved offline (printed)
✅ RULE 8: Third-party app permissions reviewed quarterly
✅ RULE 9: Suspicious activity reported immediately
✅ RULE 10: App always updated to latest version

8.2 Password Management

Use these best practices to manage your passwords securely across all platforms.

8.3 Device Security

Follow these tips to keep your device and social media accounts secure.

• Keep your phone locked (PIN, Pattern, or Biometric)
• Always update your apps
• Do not log in from unknown or public devices
• Avoid public WiFi for sensitive activities
• Use a VPN on public networks

8.4 Regular Security Audit Schedule

Follow this schedule to regularly audit your social media account security.

8.5 What to Do If You See Suspicious Activity

Take these steps immediately if you notice suspicious activity on any account.

1. ⛔ Do NOT click any links or reply
2. 📸 Take screenshots (evidence)
3. 🔑 Change your password immediately
4. 🔐 Check and remove unknown sessions
5. 🚫 Block the suspicious account
6. 🚨 Report to the platform
7. 📧 Check recovery email for unauthorized changes
8. 👥 Inform friends/family if account is compromised

Complete Security Checklist

Facebook Checklist

• Strong password (12+ characters, unique)
• Two-Factor Authentication enabled (App-based)
• Login Alerts ON
• Future posts privacy set to "Friends"
• Past posts limited to "Friends"
• Friend list visibility set to "Only Me"
• Profile Lock enabled
• Email/Phone lookup set to "Friends"
• Tag review enabled
• Active sessions checked (no unknown devices)
• Recovery email and phone added

Instagram Checklist

• Private Account enabled (for personal use)
• Two-Factor Authentication enabled
• Login activity checked (no unknown access)
• Story sharing disabled
• Story replies set to "Following"
• Comments filter enabled
• Tag manual approval enabled
• Close Friends list maintained
• Message requests restricted
• App permissions reviewed

WhatsApp Checklist

• Two-Step Verification enabled (with recovery email)
• Last Seen set to "My Contacts"
• Profile Photo set to "My Contacts"
• Groups set to "My Contacts"
• Linked Devices checked (no unknown devices)
• Security Notifications ON
• Backups encrypted (iCloud/Drive)
• Disappearing Messages enabled for sensitive chats
• Live Location sharing OFF by default

Telegram Checklist

• Two-Step Verification enabled (cloud password + email)
• Passcode Lock enabled (with auto-lock)
• Phone Number set to "Nobody" / "My Contacts"
• Last Seen set to "My Contacts"
• Active Sessions checked (unknown terminated)
• Secret Chat used for sensitive conversations
• Self-Destruct timer set for sensitive chats
• No suspicious bots in your chats
• Group invite links not shared publicly
• Account auto-delete timer set

LinkedIn Checklist

• Two-Step Verification enabled (app-based)
• Strong, unique password
• Active sessions checked (no unknown devices)
• Profile visibility set appropriately
• Email/phone visibility set to "Only You"
• Connections visibility set to "Only You"
• Job seeking preferences set privately (if needed)
• Data privacy settings reviewed
• Fake profiles reported

X (Twitter) Checklist

• Two-Factor Authentication enabled (app-based)
• Tweets protected (if personal account)
• Location tagging OFF
• Discoverability by email/phone OFF
• DM privacy set to "Following" only
• Photo tagging restricted to followers
• Muted words configured (if needed)
• Notification filters enabled
• Old tweets cleaned (if needed)
• Account recovery info updated (email/phone)

Universal Security Checklist

• Different password for every platform
• Password manager is being used
• 2FA enabled on all platforms that support it
• Recovery email and phone are up to date
• Backup codes saved offline (printed)
• Privacy settings reviewed in the last month
• Login activity checked in the last week
• Third-party app permissions reviewed
• Old/unused accounts deleted
• Phone is locked with PIN/biometric
• Apps are updated to latest versions
• Have I Been Pwned checked for email breaches

Quick Comparison: All 6 Platforms at a Glance

"Security is not a product, but a process. It's not a one-time setup, it's a daily practice."