Original Release Date: 8/25/2022
The NJCCIC is providing this guide to help our members and website visitors manage their cyber risk and maintain the security and privacy of their information. This guide provides users with the steps needed to access and change privacy and security settings, as well as instructions on how to view the user data collected by TikTok, a photo and video-sharing social media platform. It has become increasingly important for users to be aware of the type of personal data being collected – and often sold – by these free online services.
TikTok profiles are public by default, meaning anyone using the application can see the photos and videos posted on the platform. If you have not yet changed your profile settings, you may inadvertently be giving total strangers a glimpse into your life, including information about where you work, the places you visit, and the people in your social circle. With that information, it would not be too difficult for a motivated threat actor to target you and your loved ones. There are a number of actions you can take in order to better secure your accounts and posts. The NJCCIC recommends setting your account to private, blocking unknown or unfamiliar accounts, and enabling two-step verification (also known as multi-factor authentication).
The steps contained in this guide are taken from the TikTok app for Apple devices. Steps to access security and privacy settings on the TikTok app for devices running other operating systems may vary.
Set Your Profile to Private
Open the TikTok app and click on the menu icon on top right side to open settings and privacy.
Scroll down until you see “Privacy” and click private account so that it turns green, indicating that the private account setting is on.
Block Accounts on TikTok
Click on the user you want to block to view his or her profile.
Click on the menu icon on the top right corner.
Click on “Block” and then press “block” one more time on the prompt to confirm the block. The blocked user’s profile will now be shown as private.
Activate Two-Factor Authentication
Return to your Instagram profile and click on the menu icon in the top right corner to access the settings and privacy menu.
Scroll down and select “Security and Login”
Click “2-step Verification” and choose a method of multi-factor authentication.
Click on two methods and select turn on at the bottom to confirm.
Download your data:
Click on two methods and select turn on at the bottom to confirm.
1. Click on the three lines.
2. Select privacy and settings.
3. Click privacy.
4. Select download your data and follow the instructions.
Additional Resources:
https://support.tiktok.com/en/safety-hc
The NJCCIC recommends all TikTok users regularly perform a security audit on their accounts to prevent unauthorized access, external account compromise, and the theft and misuse of personal and potentially sensitive data.