Use social media safely

Whether you intend to join one or a number of social media platforms, security should be at the top of your agenda. Criminals use social media to target businesses through account takeovers, impersonation, phishing and malicious links. Ensuring you are using social media securely is essential.

Online security for social media

Using social media can expose you and your business to attacks from hackers and other malicious groups. However, there are many steps you can take to help prevent identity theft and security threats. Follow the guidelines below to ensure you use social media safely:

Secure your login details

Use a strong, unique password for each social media account and store passwords securely in a password manager. Turn on two-step verification or multi-factor authentication for all business social media accounts. Use passkeys where the platform supports them.

Manage access control

Keep tight control of who has access to your corporate social media accounts and what they can view, post and edit. Some staff may only need to access analytics. Others may need full admin powers. Give users their own access and only the permissions they need. Review access regularly and remove it promptly when someone changes role or leaves the business.

Be cautious of unexpected contacts

Be cautious of anyone who contacts you unexpectedly on social media claiming to be a reputable organisation. This could be a phishing attack. Phishing messages appear to come from a person or organisation you trust. They may try to make you reveal passwords or financial information, transfer money, open a harmful attachment or visit a malicious website.

Protect against corporate identity theft

Watch out for corporate identity theft. Criminals could use your business name and branding on social media. They would pose as your business to gain users' trust. This could be part of a phishing scam or an attempt to gain high numbers of followers that can be sold on. You can report fraud or cyber crime to Report Fraud. Running competitions on social media can put your business at risk of being impersonated.

Safeguard sensitive information

Do not share passwords, verification codes, banking details or confidential customer or business information through social media. Check unexpected requests using a trusted contact method before sharing information or taking action.

Secure your wireless network

If you access social media via wi-fi, ensure you have enough security. This protects your network from eavesdropping and hackers.

Handle attachments with care

Avoid opening message attachments from unknown sources. If you receive an unexpected attachment from what appears to be someone you know – check with the sender first. Don't open attachments with file endings like '.exe' (an executable file) or '.scr' (used for Windows screensavers). These files can be Trojans that infect your computer.

Be wary of links

Be wary of clicking on links added to messages on any social media platforms that you use. Links to current events, entertainment news, or other high-traffic sites can lead to phishing websites or malware infections. Always check the website address carefully and beware of slight changes to reputable domain names designed to trick users.

Avoid suspicious emails and pop-ups

Avoid clicking on ads and pop-ups. Be cautious of any app that wants to install on your computer.