Why settings need a second look
Most people set up an account once and rarely return to its privacy menu. Meanwhile services add features, rename options and sometimes change defaults. A new feature may start out visible to a wide audience until you adjust it. That is one reason to review your settings from time to time, and why the broader topic of platform changes matters for privacy.
Menu names differ from one service to another, so this article describes the types of control to look for rather than exact steps. If you can’t find an option, the service’s help pages usually explain where it lives.
The three questions
Nearly every privacy control answers one of three questions:
- Who can see? Posts, profile details, friends or follower lists, photos, activity status and location.
- Who can tag or mention you? And do those tags appear on your profile automatically?
- Who can contact you? Messages, friend requests, calls, comments and invitations to groups.
Going through your settings with these questions in mind keeps the review organized.
Who can see
Audience levels. Services typically offer some version of: public, connections or friends, a custom list, and only me. Public means anyone, including people without an account and possibly search engines. A narrower audience limits the first circle of viewers but not what they do next, since they can still copy and share.
Profile fields. Items such as birthday, email, phone number, workplace, school, relationship status and hometown can often be set separately. Consider whether each needs to be shown at all. Details like a birthday or school can help someone guess security answers or build a convincing fake message.
Lists of connections. Your friends or followers list can reveal who you know. Some services allow you to hide it.
Past posts. Many services have a tool to limit the audience of old posts in one step. Otherwise, you may need to review them manually.
Location. Check whether posts, photos and profiles include location information, and whether the service tracks it in the background. The effect of this on your wider trail is covered in the article about your digital footprint.
Activity status. “Last seen” and “online now” indicators can be turned off on some services, though this sometimes means you cannot see others’ status either.
Who can tag or mention you
Tags and mentions link your name to other people’s content. Useful controls include:
- Requiring approval before a tag appears on your profile.
- Limiting who can tag you at all.
- Choosing whether you are suggested in tagging or photo-matching features, where offered.
- Reviewing how you appear in other people’s photos and posts.
You can generally remove yourself from a tag or ask someone to take something down, but you cannot control what they posted. Families often benefit from agreeing norms, especially for images of children, a point developed in the guide to child photos.
Who can contact you
Unwanted contact is the source of much distress, and several settings help:
- Message requests. Filter messages from people you do not follow so they arrive in a separate folder rather than your main inbox.
- Friend or follow requests. Limit who can send them, such as friends of friends only.
- Comments. Restrict who can comment on your posts, or filter certain words.
- Group invitations. Choose who can add you to groups.
- Discoverability. Decide whether people can find you by email address or phone number, and whether you appear in outside search results.
- Blocking and muting. Blocking stops an account from interacting with you in most ways. Muting hides their content without telling them. Restricting limits visibility of their activity.
For businesses, being too closed can reduce the usefulness of an account, so the balance differs. A business may need open messages but with saved replies and filters, as discussed in handling direct messages.
Beyond the privacy menu
A few related areas are often elsewhere in the settings:
- Ad and data preferences. Controls over how activity is used for personalization, covered in the explanation of data collection and personalization.
- Connected apps and websites. Remove those you no longer use.
- Security settings. Login alerts, active sessions and a second login check. The two-step login article explains why this matters.
- Download your data. Many services let you request a copy of the information they hold, which can be revealing.
- Parental and supervision tools. Families can read what parental controls can and cannot do.
A simple review routine
- Use a logged-out or “view as” tool to see your profile like a stranger.
- Set each profile field and post audience deliberately.
- Turn on approval for tags and tighten message and request filters.
- Review connected apps, devices and location settings.
- Check security settings.
- Write down the date so you remember to repeat in a few months.
Settings are not a guarantee
Privacy controls reduce exposure, but they do not make content unshareable. A trusted friend can still screenshot a private post, and platforms retain their own access to data. The most dependable rule is to share only what you would be comfortable with if it traveled beyond its intended audience, and to treat settings as helpful guardrails, not locks.