For a business, a TikTok account is not just a place to publish; it is your line to your audience. If it gets hacked, inappropriate content may be posted, messages may be read or the account may be lost. The good news is that a few simple settings make most attacks much harder.
This article is part of the complete TikTok guide. You will see similar ideas in Instagram account security and preventing hacks.
First line of defense: password and email#
- Use a long, unique password that you have not used on any other site. A password manager helps.
- Protect the email linked to the account with a strong password and two-step verification too. Control of the email means control of account recovery.
- Keep the phone number and email you registered up to date.
- Never send your password to anyone, not even a "TikTok support" account that messaged you.
Two-step verification#
In your account settings, open Security and login and turn on two-step verification. Then even if your password leaks, an attacker also needs the second code. Prefer a method that does not depend on your phone number alone, because a SIM card can be stolen or lose service. You will find the same advice in Telegram account security and two-step verification.
Devices and active sessions#
In the security section, review the list of devices that are logged in to the account. Close any login you don't recognize and change your password. Repeat this every few months. If several admins manage the account, remove the devices of people who have left.
Privacy settings#
Privacy settings decide who can do what with your videos. The general path is Settings and privacy, then Privacy.
| Setting | What it does | Suggestion |
|---|---|---|
| Private account | Only approved followers can see your videos | For personal and children's accounts; usually off for a brand |
| Comments | Who can comment | Everyone or followers only, with a word filter |
| Duet and Stitch | Who can build on your video | More restricted for sensitive accounts |
| Video downloads | Whether people can save your video | Depends on your brand's needs |
| Suggest your account to others | Whether the account appears in suggestions | Match it to your goal |
| Direct messages | Who can message you | Limit to followers or friends |
Note that some options differ by age and account type.
Comment filters and handling trolls#
- Turn on the filters for offensive words and spam ads.
- Block or report abusive accounts.
- Delete insulting comments, and use a moderator during Live. We covered Live tips in going live on TikTok.
Common attacks and how to spot them#
- A fake "verify your account" or "you broke the rules" message: It comes with an unknown link. Check notifications only inside the app itself or in the official help center.
- An offer to boost followers or get a blue check: It is usually a way to steal your password.
- A message from a "friend" whose account was hacked: Before clicking the link, ask them through another channel.
- A third-party app that asks you to log in with TikTok: If it isn't a trusted app, don't sign in.
If you suspect a problem#
- Change your password.
- Log out unknown devices.
- Turn on two-step verification.
- Check your recovery email and phone number.
- Remove unknown connected apps.
- If you can't get in, report it through the official help center.
To understand the differences between account types and the initial settings, read creating a TikTok account and profile.
Security for team accounts#
If more than one person works on the brand account, set a few rules from the start:
- Don't send the password in a messenger or a shared note. Use a team password manager.
- When a team member leaves, change the password and log out their device.
- The phone you log in with should have a screen lock and current updates.
- Review the apps connected to the account now and then, and remove unknown ones.
- Create a dedicated email for the brand account, not one person's personal email.
Privacy for children and teens#
If your child uses TikTok, use the account settings and the app's own parental controls, such as Family Pairing, and review the message, comment and private-account settings together. These options vary by country and app version. It is also a good idea to talk with your child about personal information, strangers and suspicious messages. Don't let an address, school or phone number appear in a video.
Your account data#
TikTok usually lets you request a copy of your account data. If you want to know what information is stored, or you want to keep a copy before deleting the account, look for the data section in your account settings. Delete an account only after careful thought, because it may not be reversible. For videos you want to archive, keep a separate backup copy before doing anything else.
Monthly reminder#
Do these four things every month: check your password and recovery email, look at the logged-in devices, review the comment and message settings, and check the connected apps. Ten minutes is enough, and it prevents a lot of trouble.
Summary#
- Set a strong, unique password and protect the account's email too.
- Turn on two-step verification.
- Review logged-in devices and log out unknown ones.
- Match privacy settings to the purpose of the account.
- Don't trust "verify your account" messages or "free followers" links.
