In immediate danger? Call 000

Scam alert: Tax-time ATO and myGov impersonation texts are surging. The ATO never sends login links by text. See the current wave

Privacy settings: the 20-minute lockdown

6 min readReviewed October 2026 · Internet Safety Australia Editorial Team

In short

  1. Set every account to private/friends-only first — biggest win, one switch per platform.
  2. Hide your friends list, location and contact details.
  3. Turn off “find me by phone number/email” and limit who can message you.

Scammers mine public profiles for details that make their lies convincing — your suburb, your kids’ names, your workplace, your holiday dates. Twenty minutes of settings changes removes most of that ammunition. Settings move around, but the principles below hold on every platform; use each app’s settings search to find the exact toggle.

The five switches that matter most (every platform)

  1. Private account / friends only

    The single biggest win. On Facebook set past and future posts to “Friends”; on Instagram, TikTok and X switch on “Private account”. Strangers now see almost nothing.

  2. Hide your connections

    Hide your friends list and followers. “Hi Mum, it’s me — new phone” scams are built from visible family connections.

  3. Kill location sharing

    Turn off precise location for social apps in your phone settings, and never post holidays in real time. Your home address should never be inferable from your posts.

  4. Limit discovery and messages

    Turn off “find me by phone number/email” where offered, and set direct messages from strangers to requests-only or off.

  5. Review tagging and facial recognition

    Set tags to require your approval, and opt out of face recognition features where the platform offers a choice.

Platform quick notes

PlatformWhere to start
FacebookSettings → Privacy Checkup (guided tool) — run all four sections
InstagramSettings → Account privacy → Private; then Messages and story replies → restrict
TikTokSettings → Privacy → Private account; set Downloads, Duet and Stitch to friends/off
SnapchatSettings → “Who Can…” → Contact Me: Friends; see my location: Ghost Mode
X (Twitter)Settings → Privacy and safety → protect posts; limit DMs and photo tagging
LinkedInSettings → Visibility — limit public profile and who can see your connections

Then do the 60-second stranger test

Log out (or use your browser’s private window) and search your own name. What can a stranger see? Profile photo, bio, old public posts, tagged photos? Anything that surprises you is a setting you missed — go back and close it.

Privacy settings are not a force field

Friends-only posts can still be screenshotted and shared. The rule that never expires: don’t post anything you couldn’t bear seeing elsewhere. Settings reduce exposure; judgement eliminates it.

Common questions

Where to report this

Report to eSafety

Cyberbullying of children, adult cyber abuse, image-based abuse, and illegal or restricted online content.

Go to eSafety (leaves our site — official service)

Official sources for this guide

Reviewed October 2026 by Internet Safety Australia Editorial Team. Internet Safety Australia is independent and not a government website.