Defense Media
Activity
Guide To Keeping
Your Social Media
Accounts Secure
FACEBOOK
If you suspect your
organization is being targeted by a phishing campaign or has been compromised
by a phishing attack, contact them immediately at Katie.Harbath@fb.com (government
Facebook representative) to explain the situation.
If you think your account was taken over by someone else, Facebook can
help you secure it. This process can also help if your account or computer has
been affected by a virus or malware.
For more information about staying safe on Facebook, please visit the
Security Page or our Help Centre.
Here are a few things you can do to keep your account safe:
•
Pick
a unique, strong password. Use
combinations of at least 6 letters, numbers and punctuation marks and
don’t use this password for any of your other accounts. You can also use a
password safe like LastPass, KeePass or 1Password to set and remember unique passwords for your account.
Learn
how to change your password.
•
Think
before you click. Never
click suspicious links, even if they come from a friend or a company you know.
This includes links sent on Facebook (ex: in a chat or story) or in emails. If
one of your friends clicks a spam link, they could accidentally send you or tag
you in spammy posts. If you see something suspicious on Facebook, report it.
You also shouldn’t download things (ex: a .exe file) if you aren’t sure what
they are. Learn more aboutrecognizing
suspicious emails.
•
Watch out for fake Pages and apps/games. Be
suspicious of Pages promoting offers that are too good to be true. If in
doubt, check to see if a Page is verified.
Also be mindful when you install new apps or games. Sometimes scammers use bad
apps and games to gain access to your Facebook account.
•
Don’t accept friend requests from people you don’t know.
Sometimes
scammers will create fake accounts to friend people. Becoming friends
with scammers allows them access to spam your
Timeline,
tag you in posts and send you malicious messages. Your real friends may also
end up being targeted.
GOOGLE + AND YOUTUBE
If your Google + and/or YouTube account has been hacked, you will need
to take immediate action.
Change the password for this platform immediately (through Google +).
Contact the government account reps at Google to inform them of the
hack: cfincham@google.com or yt-hijack@google.com
PROHIBITIVE MEASURES
Recommend added precautions such as Gmail’s
two-factor authentication.
Any of these common actions could put you at risk of having your
password stolen:
•
Using
the same password on more than one site
•
Downloading
software from the Internet
•
Clicking
on links in email messages
2-Step Verification can help keep bad guys out, even if they have your
password.
An extra layer of security. Most people only have one layer – their password – to protect their
account.
With 2-Step Verification, if a bad guy hacks through your password layer,
he’ll still need your phone or
Security Key to get into your account.
Guide To
Keeping Your Social Media Accounts Secure • 2015
Defense Media Activity
Sign
in will require something you know and something you have. With 2-Step
Verification, you’ll protect your
account with something you know (your password) and something you have (your
phone or
Security Key).
Verification
codes made just for you. Codes are
uniquely crafted for your account when you need them. If you choose to use verification codes, they will be sent
to your phone via text, voice call, or our mobile app. Each code can only be
used once. See Features to
learn about backup options for times when your phone is not available.
For more information, and to get access to the steps you might need to
take if your account is compromised, here is the Google
Safety Center link.
INSTAGRAM
If you think your account has been hacked and you’re no longer able to
log in, let Instagram know. If
your account is leaving comments or sharing things that you haven’t posted,
your password may be compromised.
To secure your account:
•
Change
your password or send yourself a
password reset email
•
Revoke
access to any suspicious third-party apps
Note: Never grant
third-party access to a website or apps that aren’t following our Community Guidelines or Terms of
Use (including websites selling or promising free followers or
likes), as it’s likely an attempt to
use your account in an inappropriate way.
FLICKR
Flickr
is a photo and video-sharing community
run by Yahoo. Millions of members from all over the world are uploading photos and video that they have
created, each sharing their unique view of the world. When using Flickr you can
post, sort, and share photos and videos you have created with friends, family,
and folks from across the globe.
How
to customize your privacy controls: Flickr
empowers the community to control access to content
by providing multiple options for adjusting privacy settings on
photos, your Flickr profile, and even on commenting and contact preferences. To
review these settings, visit your Flickr
account page. Some important sections:
4.
Profile
settings. You can control your profile
privacy settings to
dictate who is able to see different parts of your profile.
7
Defense Media Activity
Change a password. For a Yahoo
account, you can change your password at https://edit.yahoo.com/ config/change_pw. If you can no longer access
your account, you can get a new password at https://edit.
yahoo.com/forgotroot/.
Commenting controls. You control
who can comment on your public photos and videos. By default, anyone is able to comment on your photos. You
can change this in the privacy setting for comments. If someone posts a comment
you don’t like, you can just delete it.
Post with care: The Flickr
community is ever growing. As you upload content, be sure to know which privacy settings you have selected and how
visible the content will be to the general public. You can also choose to opt
out of your content being searchable on third-party sites.
Block unwanted individuals: Sometimes we just don’t want to interact with someone. By blocking a community member, that person can no longer
interact with you or your photos. There are three ways to block a person:
1.
Click
the “Block [membername]” link on the Person menu.
2.
Click
the “Block this person?” link on the person’s profile page.
3.
Delete
a comment on one of your photos. (You’ll see the option to block the person,
too.)
To see the people you’ve blocked, click the link at the bottom of your
contact list.
SafeSearch: You can
control what kind of content shows up on your Flickr searches. By default, SafeSearch is enabled on your account, which
leaves restricted and moderate content out of the results. When you are signed
in, this feature can help ensure that your audience is not exposed to “adult
content”. Learn more about SafeSearch.
Report abuse: The Flickr
staff works with the community to ensure an enjoyable experience for all. If
you see something you feel violates
the Terms of Service or the Community Guidelines, report it by doing the
following:
Flagging a photo
1.
Go to
the photo’s page.
2.
At
the bottom-right corner of the page, click Flag this photo.
3.
Check
the “I don’t think this photo is flagged at the appropriate level” checkbox.
4.
Click
Submit.
The Flickr staff will review the photo in question.
If you come across content that you think might be illegal or
prohibited, use the Report Abuse system
instead.