Youth Shield Youth Shield
English العربية کوردی
Home / Guides / Platform

Platform Guides

Published guides for this platform

6 guides

Sub categories

Facebook 1 guide Instagram 1 guide TikTok 2 guides Telegram 1 guide Snapchat 0 guides WhatsApp 1 guide Twitch 0 guides YouTube 0 guides Telegram 0 guides WhatsApp 0 guides WhatsApp 0 guides

TikTok is fun, fast and public by default if you do not check your settings. Strangers can find your videos, scammers can message you, and anyone who learns your password can take over your account. The good news is that most of the protection you need takes about ten minutes to set up. This guide covers privacy, interactions, scam defence and Family Pairing, so teens and parents can do it together.

Why TikTok accounts get targeted

Accounts with lots of followers, rare usernames or linked payment details are attractive to hackers. Scammers usually do not "hack" anything clever. They trick you into handing over access. Common tricks include:

  • Fake messages saying you have been "selected" for a verification badge, a giveaway or free coins.
  • Links claiming your video broke copyright rules and your account will be deleted unless you log in right now.
  • Friendly strangers who move the chat to another app, or ask for a code that was just sent to your phone.
  • Fake "login" pages that look like TikTok but have a different web address.

Key rules to remember

  • Never share a verification code with anyone, even someone who seems to be a friend or TikTok staff.
  • Real prizes do not ask for your password. If a message makes you panic or rush, stop and check it.
  • Use a unique password that you do not use on any other site. A password manager makes this easy.
  • Only log in through the official app or by typing the address yourself, not through links in messages.
  • Tell a trusted adult early. Getting help quickly is never embarrassing, and it limits the damage.

Menu names can change slightly between app versions and countries, so if a setting is in a slightly different place, use the search tool in Settings and privacy. TikTok's official Safety Center at tiktok.com/safety also has up-to-date guides for teens and parents.

Steps

  1. Open your settings. Tap Profile, then the menu icon (three lines) in the top corner, then Settings and privacy.
  2. Make your account private. Go to Privacy and switch on Private account. Only approved followers can then watch your videos. Check this even if your account was set to private by default.
  3. Limit who can find you. In Privacy, look at the discoverability options. Turn off suggesting your account to others if you want a smaller circle, and avoid syncing your phone contacts unless you really need to.
  4. Control direct messages. Under Interactions or Direct messages, set messages to friends only, or turn them off. Fewer people who can message you means fewer scam attempts.
  5. Restrict comments, Duets, Stitch and mentions. Choose Friends or No one for each. This reduces harassment and stops strangers reusing your content.
  6. Hide your activity. Check who can see your liked videos and following list, and set them to private or friends only. Also turn off video downloads if you do not want others saving your clips.
  7. Set up 2-step verification. Go to Security and permissions and turn on 2-step verification. Use our separate TikTok 2-Step Verification guide for the full walkthrough.
  8. Check your logged-in devices. In Security and permissions, open Manage devices. Remove any phone or tablet you do not recognise, then change your password straight away.
  9. Review app permissions. In your phone's own settings, find TikTok and check access to contacts, location, camera and microphone. Allow only what you actually use, such as the camera while filming.
  10. Turn on Family Pairing. Go to Settings and privacy then Family Pairing. A parent installs TikTok, opens the same menu, and links the two accounts by scanning a QR code. Parents can then set daily screen time, limit who can message, and turn on Restricted Mode to filter content that may not suit younger viewers.
  11. Know how to block and report. To block, open the person's profile, tap the three dots and choose Block. To report a video or comment, press and hold it and tap Report. Report suspicious messages the same way.
  12. If you clicked something suspicious, change your password at once, log out of all devices, check your email for security alerts, and tell a parent or guardian. If you gave away a code or payment details, contact your bank or the platform's support too.

Why WhatsApp accounts get hijacked

Your WhatsApp account is tied to your phone number, so anyone who gets the six-digit code sent to you can register your number on their own phone. Scammers know this, so they rarely try to "hack" anything. They trick you into handing over the code yourself.

A common trick is a message from a friend, or someone who looks like one, saying "I sent my code to your number by mistake, can you send it back?" The code is actually your WhatsApp login code. Once the scammer has it, they can lock you out and message your contacts pretending to be you.

The one setting that protects you most

Two-step verification adds a personal six-digit PIN that WhatsApp asks for when your number is registered again. Even if someone tricks you into sharing the SMS code, they still can't get in without your PIN. Add a recovery email as well, so you can reset the PIN if you forget it.

Simple rules to remember

  • Never share a WhatsApp code with anyone, including friends, family, "support staff" or someone claiming to be a teacher or moderator.
  • Never share your PIN. WhatsApp will not ask for it in a chat.
  • Treat urgent messages with suspicion. Pressure like "quick, I'm in trouble" is a warning sign. Phone or video call the person using a method you already trust.
  • Be careful with unexpected voice notes. Voices can be copied by AI tools, so a familiar voice alone is not proof of who is writing.
  • Tell a trusted adult early if something feels wrong. Reporting fast limits the damage.

Where to find official help

WhatsApp's own Help Center (faq.whatsapp.com) explains two-step verification, account recovery and reporting. Menu names can differ slightly between phone models and app versions, so use it if your screen looks a little different from the steps below.

Steps

  1. Update WhatsApp. Open the App Store (iPhone) or Google Play Store (Android) and install any available update. Newer versions have the latest security options.
  2. Open the settings. On iPhone, tap the Settings tab at the bottom right. On Android, tap the three dots at the top right, then Settings.
  3. Go to Account. Tap Account, then Two-step verification.
  4. Turn it on. Tap Turn on or Enable, then choose a six-digit PIN. Avoid birthdays, repeated digits or anything a friend could guess.
  5. Confirm the PIN. Enter it a second time. Do not screenshot it or put it in a chat. A family password manager or a private note is safer.
  6. Add a recovery email. Enter an email address you control and confirm it. Without one, getting back in after forgetting your PIN can be much harder. Use an email account that also has a strong password and its own two-step protection.
  7. Check linked devices. Go to Settings, then Linked devices. If you see a computer or browser you do not recognise, tap it and choose Log out.
  8. Turn on security notifications. If your version offers Security notifications under Account, switch it on so you are alerted when a contact's security code changes.
  9. Check for a passkey option. If Passkeys appears under Account, you can use your face, fingerprint or screen lock instead of relying only on SMS codes.
  10. Quiet unknown callers. Go to Settings, Privacy, Calls, and switch on Silence unknown callers to cut down on scam calls and voice-clone attempts.
  11. Block and report suspicious chats. Open the chat, tap the contact name, then choose Block and Report. Do not reply, click links or send codes first.
  12. If you lose access. Reinstall WhatsApp, enter your phone number and request a new code. Enter your PIN when asked. Then warn your contacts through another channel that someone may have messaged them pretending to be you, and tell a parent or guardian.
  13. Do a monthly check-up. Every few weeks, review linked devices, confirm your recovery email is still correct and remind friends never to share codes.

Telegram is a favourite for school group chats, gaming communities and creator channels. That popularity makes teen accounts a target. Most Telegram hijackings don't involve clever hacking. They start with a trick: a "friend" asks you to vote in a contest, a fake recruiter sends a "job link", or someone says they sent a login code to your phone by mistake. If you hand over that code, the attacker can log in as you.

Two-Step Verification adds a second lock. Even if someone gets your login code, they still need a password that only you know. It takes about five minutes to set up, and it is one of the best things you can do for your account.

How the extra lock works

Normally, Telegram logs you in with a code sent to your phone number or to another device where you're already signed in. With Two-Step Verification on, Telegram also asks for your own additional password. A scammer with only the code gets stuck at that screen.

Golden rules to remember

  • Never share a login code with anyone, even a friend, a "support agent" or someone offering a job. Telegram login codes are for you only.
  • Make the password different from every other password you use, and don't use your birthday, name or phone number.
  • Add a recovery email you can access. If you forget the password and have no recovery email, getting back in can mean a waiting period of around seven days.
  • Tell a trusted adult if someone pressures you for codes or links. Pressure and urgency are classic scam signs.

The steps below also cover a few related settings, such as hiding your phone number and checking which devices are logged in, which close other common gaps. Menu names can differ slightly between phone and desktop versions and after updates, but the options are in the same area.

Steps

  1. Update Telegram. Install the latest version from the official app store so you have the newest security options.
  2. Open Privacy and Security. Tap Settings, then Privacy and Security.
  3. Turn on Two-Step Verification. Tap Two-Step Verification, then choose Set Additional Password (or similar wording).
  4. Create a strong password. Use a long phrase of several random words with a number or symbol. A family password manager can store it safely, so you don't need to memorise it or write it in your notes app.
  5. Add a password hint carefully. Make it something only you would understand. Never write the password itself, or an obvious clue, in the hint.
  6. Set a recovery email. Enter an email account that has its own strong password and two-step protection. Telegram will send a confirmation code to it. Type the code in to finish.
  7. Check your active devices. Go to Settings, then Devices (on desktop, look under Privacy and Security for Active Sessions). If you see a device you don't recognise, end that session. You can choose to terminate all other sessions if unsure, then log in again where needed.
  8. Add a Passcode Lock. In Privacy and Security, choose Passcode Lock, set a code, and pick a short auto-lock time. This protects chats if someone picks up your unlocked phone.
  9. Hide your phone number. Under Phone Number, set who can see your number to Nobody, and who can find you by number to My Contacts if available.
  10. Control who can add you. Under Groups & Channels, choose My Contacts so strangers can't drop you into spam or scam groups. Do the same for Calls if you want fewer unknown callers.
  11. Test your setup. Ask a parent or guardian to help you check that each setting saved. Then practise saying no: if anyone messages asking for a code, password or "verification", block and report them.

Why your Instagram settings matter

Instagram is a place to share photos, chat with friends and follow creators. It is also a target for account thieves, fake "brand deals," and strangers who send unwanted messages. Most problems start the same way: a message that looks friendly or urgent, a link, and a password typed into the wrong place. A few settings and habits make that much harder.

Menu names can change between app versions, so if something looks different, use the search bar at the top of Settings and activity.

Scams to watch for on Instagram

  • Fake "security" messages: Someone claims your account will be banned or your copyright was violated, and asks you to click a link and log in. Instagram does not ask for your password in a DM.
  • Hijacked friends: A friend's account suddenly sends a strange link or asks for a login code. Their account may have been taken over, so check with them on another app or in person.
  • Too-good-to-be-true offers: Free followers, giveaways, easy "modelling jobs," or money-flipping schemes are common bait.
  • Login code requests: Never share a verification code with anyone. A code is only for you.

Safer habits to pair with the settings

  • Use a long, unique password that you do not use anywhere else. A password manager can remember it for you.
  • Do not log in through links sent in messages. Open the Instagram app yourself instead.
  • Avoid public Wi-Fi for logging in to accounts, or at least turn on two-factor authentication first.
  • Talk to a parent, guardian or trusted adult early if something feels wrong. Reporting a scam is not embarrassing, and it helps others.

Where to learn more

The most reliable source is Instagram's own Help Center at help.instagram.com, which covers hacked accounts, Teen Accounts, reporting and parental supervision. For videos, search YouTube for official explainers on Instagram's channels or from established digital safety organisations, and check that the channel is the genuine one before following any advice. Always be careful with video comments and descriptions that push you to click outside links.

Steps

  1. Open your settings. Go to your profile, tap the menu (three lines) in the top right, then tap Settings and activity.
  2. Make your account private. Tap Account privacy and switch on Private account. Only approved followers can then see your posts and stories. Review your follower list and remove people you do not know.
  3. Turn on two-factor authentication. Open Accounts Center, then Password and security, then Two-factor authentication. Choose your Instagram account and pick an authentication app if possible, as it is generally safer than text messages. Save any backup codes somewhere private.
  4. Change your password. In Password and security, tap Change password and create a long, unique one. A passphrase of several random words works well.
  5. Check where you are logged in. In Password and security, open Where you're logged in. Log out of any device you do not recognise, then change your password straight away.
  6. Control who can message you. In Settings and activity, open Messages and story replies. Limit who can message you and add you to groups, and switch off Show activity status if you do not want people to see when you are online.
  7. Filter unwanted comments and DMs. Open Hidden Words and turn on filtering for offensive words and message requests. You can also add your own words or emojis to hide.
  8. Manage tags and mentions. Open Tags and mentions and limit who can tag or mention you. Turn on manual approval for tags so strange posts do not appear on your profile.
  9. Use Close Friends for personal stories. When you share a story, choose Close Friends instead of all followers. Avoid posting your school, home address or live location.
  10. Review sensitive content and supervision options. Check Content preferences for sensitive content controls. If you are under 18, Teen Account protections may already apply. Families can also set up supervision through Family Center if everyone agrees.
  11. Block, restrict and report. On any profile, tap the three dots to Block, Restrict or Report. For a message, press and hold it and choose Report. Do not reply to the sender or click their links.
  12. If your account is hacked. Use the login help on the Instagram screen or visit help.instagram.com. Change the password on your email account too, and tell an adult you trust.

Your TikTok account holds more than dance clips. It holds your direct messages, your drafts, your followers, your linked email or phone number, and possibly your payment details for coins and gifts. If someone guesses or steals your password, they can post as you, message your friends with scam links, or lock you out completely. Two-step verification (2SV) is the easiest way to stop that.

What 2-step verification actually does

Normally, one thing protects your account: your password. With 2SV, TikTok asks for a second proof that it is really you whenever someone logs in from a new place. That proof might be a code or a tap on your phone. A thief who knows your password still gets stuck at the second step.

Think of it like a front door with two locks. The password is the first lock. The second lock needs something only you have, such as your phone.

Why teens are targeted

  • Password reuse: if you use the same password on a game, a school site and TikTok, one leak can open all three.
  • Fake login pages: messages like "Your video violated the rules, log in here to appeal" often lead to copies of the TikTok login page.
  • Account-selling and "free followers" tricks: some people ask for your login in return for fame or giveaways. Giving it away hands over your account.
  • Hijacked friends: a message from a friend's stolen account feels trustworthy, which is why it works so well.

Which second step should you choose?

TikTok offers several verification methods, and which ones you see can depend on your app version, age and country. Here is how to think about them:

  • Authenticator app or passkey (where offered): usually the strongest option, because nothing is sent over text that can be intercepted.
  • Push notification or email code: convenient and a good choice, but only if your email account is also protected with its own 2SV.
  • SMS code: better than nothing, but weaker if someone can take over your phone number or read your lock-screen messages.

If TikTok lets you pick more than one method, do it. Having a backup means you will not be locked out if you lose your phone.

Rules that make 2SV work

  • Never share a verification code with anyone, including someone claiming to be TikTok support. TikTok will not ask you for it in a DM.
  • If you get a code you did not request, someone may be trying to log in. Change your password straight away.
  • Use a long, unique password. A passphrase of several random words is easier to remember than a jumble of symbols.
  • Secure the email address linked to your TikTok first. Whoever controls your email can often reset everything else.
  • Parents and guardians: sit down together and set this up as a team. It is a good moment to talk about what to do if something looks suspicious, with no blame attached.

Note: menu names can change between app updates. If you cannot find an option exactly as written below, look for similar wording under Settings and privacy, or use the search bar inside Settings.

Steps

  1. Update the app. Open your phone's app store and install the latest version of TikTok so you get the newest security options.
  2. Open your settings. Tap Profile, then the menu icon (three lines) in the top corner, then Settings and privacy.
  3. Go to security. Tap Security & permissions (it may appear as Security and login on some versions).
  4. Update your password first. Tap Password and create a new, long, unique one that you do not use anywhere else. Do not save it in a note called "passwords" on your phone.
  5. Turn on 2-step verification. Tap 2-step verification and read the options on screen.
  6. Choose your methods. Pick at least two if you can, for example an authenticator app or push notification plus email. Avoid relying on SMS alone if a better option is offered.
  7. Verify the contact details. Make sure the email and phone number linked to your account are yours and still work. Remove any you do not recognise.
  8. Complete the test. Enter the code TikTok sends you or approve the prompt. Only turn the setting on once you see a confirmation.
  9. Check your devices. In Security settings, open Manage devices (or Devices) and log out of any phone or tablet you do not recognise or no longer use.
  10. Turn on security alerts. If you see Security alerts or login notifications, switch them on so you are told about unusual activity.
  11. Protect your email too. Open your email app's account settings and enable 2-step verification there as well.
  12. Practise spotting tricks. If a message says your account is banned or offers free followers, do not click. Open the TikTok app directly and check your inbox notifications instead.
  13. Know what to do if you are hacked. Try to reset your password, log out of all devices, tell a trusted adult, and use TikTok's in-app Report a problem option to ask for help.

Facebook is still where many teens keep family contacts, school groups, event invites and Messenger chats. That makes a teen's account worth stealing. One of the easiest ways to take it is not clever hacking. It is a text or message that looks urgent and tricks someone into handing over a password or a login code.

This guide has two parts. First, you will learn to recognise phishing texts and messages, ideally together with a parent, carer or friend. Then you will change the Facebook settings that make a stolen password much less useful. Menu names can change between app versions, so if something looks different, use the search bar in Settings.

What a phishing text about Facebook looks like

Phishing means someone pretends to be a trusted person or company to get you to give up private information. Common versions aimed at Facebook users include:

  • The "your account will be disabled" scare: a message claiming you broke a rule and must click a link within hours.
  • The login-code request: a friend, or a "support agent", asks you to send the six-digit code you just received. That code is the key to your account, so never share it.
  • The "is this you in this video?" message: a link sent from a hacked friend's account that leads to a fake Facebook login page.
  • The fake security alert: a text saying someone logged in from another country, with a button to "secure your account".
  • The prize or verification offer: promises of a blue badge, free gift cards or easy money if you "confirm your details".

The Pause-Check-Ask habit

Agree on a simple family or friend-group routine for anything suspicious:

  • Pause: urgency is the scammer's main tool. Real problems rarely need action in five minutes.
  • Check: look at the sender, the spelling and the link. Do not tap it. Open the Facebook app yourself and see whether any real notification exists.
  • Ask: show the message to a trusted adult or friend. If it came from a friend's account, contact them another way, such as a call or in person, to find out if they really sent it.

Make it a no-blame rule. Teens are much more likely to speak up quickly if they know they will not be punished for clicking, and speed matters when an account may be compromised.

If you already clicked or replied

Do not panic. Change your Facebook password straight away from the official app, not from the link. Then log out of other devices, turn on two-factor authentication and tell a trusted adult. If you used the same password anywhere else, change it there too.

For more detail, the Facebook Help Center has official pages on hacked accounts and on how to recognise suspicious messages. Search for them from inside the app or from Facebook's own website, not through links in messages.

Steps

  1. Run a Security Checkup. Open Facebook, tap the menu (your profile picture or the three lines), then Settings & privacy > Settings. Search for "Security Checkup" and follow the prompts. It reviews your password, login alerts and where you are logged in.
  2. Create a strong, unique password. Go to Settings > Accounts Center > Password and security > Change password. Use a long passphrase of several random words that you do not use for any other account. A password manager can store it for you.
  3. Turn on two-factor authentication. In Accounts Center > Password and security, choose Two-factor authentication and select your Facebook account. Pick an authenticator app if you can. A text-message code works, but an app is generally harder to intercept. Never tell anyone the codes.
  4. Turn on login alerts. In the same Password and security area, find the login alert settings (often under "Get alerts about unrecognised logins") and enable notifications. You will be told if someone tries to get in from a new device.
  5. Check where you are logged in. Open Password and security > Where you're logged in. Log out of any device or location you do not recognise, including old phones or school computers.
  6. Learn to spot real Facebook emails. In Password and security, look for the option to see recent emails from Facebook. If a message claims to be from Facebook but is not listed there, treat it as suspicious.
  7. Review your privacy settings. Search Settings for "Privacy Checkup". Set who can see your posts, who can find you by phone number or email, and who can send friend requests. Keep personal details such as your phone number, school and address hidden or "Only me".
  8. Tighten Messenger and friend requests. Limit who can contact you, and do not accept requests from people you do not know in real life. Scammers often build fake profiles to send links later.
  9. Check that teen protections are active. If you are under 18, look in Settings for Teen Account or supervision options. Parents and teens can discuss and set these together, including who can message the teen and what content they see.
  10. Review connected apps and websites. Search Settings for "Apps and websites". Remove anything you no longer use or do not recognise, because old connections can expose your data.
  11. Report and block suspicious messages. Open the message or profile, tap the name or the three dots, and choose Block or Report. Then delete the message. Reporting helps protect other users as well.
  12. Practise once a month. Set a reminder to rerun the Security Checkup, check logged-in devices and talk about any odd messages you received. A five-minute routine is easier to keep than a big yearly clean-up.