What you need to do before your first post
Before you create an account on any social media platform, decide what you want the account for and who you want to see it. This matters because different platforms work differently — Facebook is built around real names and family connections, Instagram focuses on photos and visual content, TikTok is short videos, and LinkedIn is professional networking. Choosing the right platform for your purpose saves you time and keeps your experience closer to what you actually want.
You will need an email address to create any account. Use an email you check regularly, because platforms send password reset links and security alerts there. If you do not have an email address yet, you can create one for free through Gmail, Outlook, or Yahoo. Write down your email and password somewhere safe — not on a sticky note on your monitor, but in a notebook you keep at home or a password manager app.
Think about what name you want to use. Most platforms let you choose a username (the name people use to find you) separately from your display name (what appears on your posts). You do not have to use your real name if you do not want to. Many people use a variation, a nickname, or something that describes their interests. Whatever you choose, write it down so you remember it later.
Key Takeaways
- Choose a platform that matches what you want to do — Facebook for staying connected to people you know, Instagram for photos, TikTok for short videos, LinkedIn for work contacts.
- Use an email address you check regularly and keep your password written down somewhere safe at home, not stored in your browser or on paper near your computer.
- Your username and display name can be different, and you do not have to use your real name if you prefer privacy.
- Adjust your privacy settings before you post anything — decide whether strangers can see your posts, send you messages, or find your account through search.
- Check your account settings regularly for login activity and connected apps, and remove anything you do not recognize.
Setting your privacy and who can see what
Every platform has privacy settings, usually found in a menu labeled Settings or Account Settings. This is where you control who sees your posts, who can message you, and whether your account shows up in search results. Do not skip this step — the default settings on most platforms are designed to show your content to as many people as possible, which is not always what you want.
The most important setting is your profile visibility. You can usually choose between "Public" (anyone can see your posts and find your account) or "Private" (only people you approve can see your posts). If you are using the account to stay in touch with people you already know, private is usually safer. If you are using it to share your work or interests with a wider audience, public works better. You can change this setting anytime.
Check who can message you. Most platforms let you limit messages to people you follow or are connected to, which stops strangers from sending you unwanted content. You can also turn off notifications for messages from people you do not follow, so you see them only if you go looking. Similarly, check whether people can tag you in photos or posts — you may want to approve tags before they appear on your profile.
Creating a strong password and keeping it safe
Your password is the key to your account. A strong password is at least 12 characters long and uses a mix of uppercase letters, lowercase letters, numbers, and symbols — something like "BlueSky$42Garden" rather than "password123". The longer and more random it is, the harder it is for someone to guess or crack.
Do not use the same password across multiple accounts. If one platform gets hacked and your password leaks, someone with that password can try it on your email, your bank, and every other account you have. If you have trouble remembering different passwords, use a password manager — apps like Bitwarden, 1Password, or Dashlane store your passwords in an encrypted vault and fill them in automatically. These apps are safer than writing passwords down or storing them in your browser.
Never share your password with anyone, including friends, family, or platform support staff. Real support staff will never ask for your password. If someone claims to be from the platform and asks for it, that is a scam. If you think someone else has accessed your account, change your password when ready from a computer or phone you trust.
Recognizing and avoiding scams on social media
Social media is where scammers go because they can reach many people quickly and hide behind fake accounts. The most common scams ask you to click a link, read something, or send money. They often use urgency ("Act now or lose your account") or appeal to emotion ("I need help, can you send money?"). If something feels off or too good to be true, it probably is.
Do not click links from people you do not know, even if the message looks like it came from a friend. Scammers can hack accounts and send messages from them. If a friend sends you a suspicious link, message them through another way (text, phone call, email) and ask if they really sent it. Do not read files from strangers. Do not send money to anyone you have not met in person, no matter what story they tell.
Fake accounts often have no profile picture, very few posts, or posts that look copied from other accounts. They may follow thousands of people but have very few followers themselves. If someone you do not know sends you a friend request or message, look at their profile before you respond. If it looks fake, ignore it or report it to the platform.
Managing what apps can access your account
Many apps and websites ask permission to connect to your social media account — things like photo editors, games, or scheduling tools. When you give permission, that app can see some of your account information and sometimes post on your behalf. This is convenient, but it also means you are giving access to a third party.
Check your connected apps regularly. On Facebook, this is under Settings and Apps and Websites. On Instagram, it is under Settings and Apps and Websites. On Twitter/X, it is under Settings and Apps and Sessions. Look through the list and remove anything you do not use or do not recognize. If you see an app you do not remember authorizing, remove it when ready — it may be a scam or malware.
When you remove an app, it loses access to your account. You can always reconnect it later if you need it. Removing old apps is one of the easiest ways to keep your account find, because old apps are often abandoned by their creators and can become security risks.
What to do if your account gets hacked
If you cannot log in, or if you see posts you did not make, your account may have been hacked. Act quickly. Go to the platform's login page and use the "Forgot Password" option to reset your password. Use a strong new password that you have never used before. If you cannot access the email linked to your account, you may need to use a backup email or phone number to regain access.
After you regain access, change your password again and check your connected apps — remove anything suspicious. Look through your recent login activity (usually in Settings under Security or Login Activity) and log out any sessions you do not recognize. If the hacker changed your recovery email or phone number, change those back when ready.
Report the hack to the platform. Most have a report form or support page for compromised accounts. Tell your contacts that your account was hacked so they know not to trust messages from it during that time. If the hacker used your account to send money or make purchases, contact your bank or payment service right away.
Updating your information and staying organized
Keep your account information current. If you change your email address, update it in your account settings so you can still receive password reset links and security alerts. If you change your phone number, update that too if you use it for two-factor authentication (a security feature that requires a code from your phone when you log in).
Review your account settings every few months. Platforms change their privacy options and add new features, and what worked for you a year ago might not be the best choice now. Check whether new apps have connected to your account without your knowledge. Look at your login history to see if there are any locations or devices you do not recognize.
If you decide to stop using an account, you have two choices: deactivate it (which hides your profile and posts but keeps your data) or delete it (which removes everything permanently after a waiting period, usually 30 days). Deactivation is reversible if you change your mind. Deletion is not. Choose based on whether you think you might want to come back.
Frequently Asked Questions
Do I have to use my real name on social media?
No. Most platforms let you use a username or display name that is different from your legal name. Some platforms have policies about using "authentic" names, but they usually allow nicknames, pen names, or variations of your real name. Check the specific platform's rules if you are unsure.
What is two-factor authentication and should I turn it on?
Two-factor authentication (often called 2FA) requires a second step to log in — usually a code sent to your phone or generated by an app. It makes your account much harder to hack because a scammer needs both your password and access to your phone. You should turn it on if the platform offers it, especially for email and financial accounts.
Can I have more than one account on the same platform?
Yes, most platforms let you create multiple accounts. You will need a different email address for each one. Some people use separate accounts for different purposes — one for family, one for hobbies, one for work. Just remember which email goes with which account so you can log in later.
What should I do if someone is harassing me on social media?
Block or mute the person so you do not see their posts or messages. Report them to the platform using the report button on their profile or posts. Most platforms have policies against harassment and will investigate. If the harassment is severe or includes threats, save screenshots and consider reporting it to local police.
Is it safe to use the same password manager across all my devices?
Yes, password managers are designed to sync securely across your phone, tablet, and computer. The passwords are encrypted, which means they are scrambled in a way only you can unscramble with your master password. This is actually safer than trying to remember different passwords or writing them down.