Social Media Privacy: The Settings Every Teen Should Check

Platforms rise and fall, but the privacy playbook barely changes — because the underlying problem is constant. Default settings are tuned for growth. A platform grows when accounts are discoverable, when strangers can start conversations, and when content reaches beyond existing friends. None of that is malicious. It simply means the defaults optimise for something other than your teenager's safety, and nobody will change them on your behalf.

The good news is that a short list of settings, checked once and revisited occasionally, covers most of the realistic risk. Here it is in the form that survives redesigns: by what the setting does, not what this month's menu calls it.

The checklist

1. Private account. The single highest-value toggle. It moves the default from "anyone can see and follow" to "I approve who sees this." Everything else on this list matters less if this one is right.

2. Who can message or DM. Restrict to people they already follow or have approved. An open inbox is the primary route by which strangers reach children, and closing it removes a whole class of risk in one tap. Check whether the app has a separate "message requests" folder that bypasses the setting.

3. Location off. Two separate things to switch off: location tags on individual posts and stories, and the operating system permission granting the app location access at all. Do the second — a setting you turn off inside the app can be re-enabled by a redesign; a revoked OS permission cannot.

4. Who can find me. Turn off "suggest my account to others," and disable being findable by phone number or email address. This is how accounts get discovered by people who have a contact list but no business having your child in it.

5. Tagging and mentions. Require approval before tagged photos appear on their profile. This is as much about reputation as safety — it stops other people writing your child's public record for them.

6. Story and audience scope. Check the default audience for stories and posts. "Everyone" is common, and close-friends lists tend to drift over time as friendships change.

7. Comment controls. Most platforms allow restricting who can comment and filtering offensive terms automatically. Worth doing pre-emptively rather than after a pile-on.

8. Blocking and reporting. Not a setting but a rehearsal. Find both buttons together, so using them is a known action rather than a decision made while distressed.

Two settings people forget

Contact syncing. Many apps ask to upload the phone's contact list, then use it to suggest accounts in both directions. Declining keeps your teenager out of suggestion lists belonging to people they barely know.

Old accounts. The abandoned account from three years ago, still public, still tagged, still holding photos from when they were eleven. Worth an afternoon: find them, tighten or delete them.

The conversation that makes it stick

Settings decay. Apps redesign, features get added, options get reset, and a teenager who does not understand why a toggle is set will not restore it after an update.

So teach the reasoning rather than the taps:

• A public account plus a location tag is a live map of where your child is and when.
• An open DM is an unlocked front door, and it is the route almost every grooming attempt starts down.
• Discoverability by phone number connects a real identity to an account they may have assumed was pseudonymous.

Frame it as running their own account well — a competence, not a restriction. Teenagers care a great deal about controlling their own image, which is the same instinct, and the framing lands far better than a safety lecture.

Practically: do the checklist together when they join a platform, then revisit every few months and after any major app update. Sit beside them and let them do the tapping.

What this does and does not cover

Worth being clear, because a completed checklist can create a false sense of finality.

It covers the stranger-contact routes, accidental public exposure, and the discoverability that connects an account to a real identity and location. That is a meaningful share of the realistic risk, particularly for younger teenagers.

It does not cover anything involving people your child already knows — which is where most bullying happens, since it usually comes from classmates who are already approved contacts. It does not affect what your child chooses to share with an approved audience, and it does nothing about screenshots. A private account is not a private conversation, and the oversharing habits worth teaching are a separate piece of work.

For the parts a settings menu cannot reach, the protective factor is your teenager telling you when something goes wrong — which is why we argue against covert monitoring in monitoring vs spying.

Vetting the next app

The checklist above works best applied before an app becomes established in your teenager's life. When they ask for something new, the same questions form a decent vetting routine — see can you trust your child's favourite apps.

How SmartProtect fits

SmartProtect does not change settings inside social apps — no parental tool reliably can, and one claiming to would need access we deliberately do not take. What it does is manage which apps are in play and when, visibly, so decisions about a new platform happen as a conversation rather than a discovery. See app blocking.

Key takeaways

• Defaults favour growth, not privacy. Nobody will change them for you.
• Private account and restricted DMs carry most of the benefit.
• Revoke location at the OS level, not just inside the app.
• Turn off contact syncing and clean up abandoned old accounts.
• Teach the reasoning, because settings decay and updates reset things.
• This does not cover bullying by people they know. For that, what protects them is being able to tell you.