TikTok Privacy Settings: A Checklist With Trade-offs

The biggest TikTok privacy decision is whether your account is private, and it is also the one with the clearest trade-off. TikTok's help material says that on a private account only followers you approve can watch your videos, and that people cannot Duet, Stitch or download them. That protects you and costs you reach. After that come smaller choices: who can comment and message you, whether your account is suggested to other people, what data feeds your ads, where your location shows, which apps and sign-ins still have access, and how well the login itself is protected. TikTok renames menus and changes defaults often, and the pages we could read describe some defaults differently depending on age and region. So this checklist describes what each setting does, says where we could not verify a menu path, and links the official pages.

If you are thinking about the sister apps, the same walkthrough exists for Instagram and Facebook. This page sticks to settings and everyday hygiene.

Do this now: the 15-minute pass

1. Decide private or public. If you are not a creator or a business, private is the sensible default. Read the trade-off below first.
2. Set who can comment. TikTok offers Everyone, Friends or Off, for the account or for one video.
3. Set Duet and Stitch to Friends or Off if your account is public.
4. Set who can send direct messages to Friends or No one.
5. Look at suggestions and contact syncing and switch off what you did not choose.
6. Check the download setting for your videos.
7. Review ad and data choices and location, in the app and in your phone's settings.
8. Remove access you do not recognise, and never log into a "viewer tracker".
9. Turn on two-step verification, and read the security alerts.
10. Request a copy of your data once, to see what is held.

You can rehearse every one of these in the TikTok Privacy Settings Lab, a scenario with fictional people where nothing real is at stake.

Private or public

TikTok's help material says a private account means only followers you approve can watch your videos, and that people cannot Duet, Stitch or download them. It also says you can make an individual video private so only you can see it, whether the account is public or private. The trade-off is simple. Private means fewer strangers see your face, voice and routine, which blunts lookalike profiles and scam messages. It also means you will not be discovered as easily. If you run a shop or a creator account, public is a business decision, so keep what you post public and keep your personal life elsewhere. One caution: going private does not hide everything. Your username, picture and bio can still be seen, and a comment you leave on someone else's post is visible on that post. Keep sensitive details out of them.

Who can comment

TikTok's help material lists three comment choices: Everyone (anyone who can view your videos), Friends (people who follow you and whom you follow back) and Off. You can set this for the whole account or per video. The cost of Friends is a quieter room, and a friend who has not followed you back cannot reply. The cost of Everyone is that a video that spreads draws strangers. A sensible pattern is Friends as the default and Everyone for the odd video you want open. When a comment is abusive, remove it, report it and block the account rather than replying.

Duet and Stitch

Duet places someone's video beside yours; Stitch cuts a clip of yours into theirs. TikTok's help material says private accounts cannot be Duetted or Stitched, and that on a public account you can choose Everyone, Friends or Off, in your privacy settings or on an individual video. Older pages use labels such as "Who can Duet with me", so the wording in your app may differ. The cost of Off is that friends cannot remix you either. For a personal account that is rarely a loss. For a creator, remixing is part of how videos spread, so decide on purpose.

Direct messages

Strangers messaging you is where many scams start. TikTok says direct messages can be set to Everyone, Friends (followers you follow back) or No one, and are only available to registered accounts aged 16 and over. Set it to Friends or No one unless you have a reason. The cost is that a real contact who is not a mutual follower cannot reach you. Treat any message that offers a prize, asks you to log in again or asks for a code as a scam, and do not open the link.

Suggestions and contact syncing

TikTok can suggest your account to other people and can use your phone contacts or linked social friends to find people. Third-party guides describe these as separate switches, one for who your account is suggested to and one for syncing contacts, and say that turning off syncing is not the same as removing contacts already uploaded. We could not confirm the exact menu names on TikTok's own pages, and the guides disagree about the default for adults, so look in the app's privacy settings and check TikTok's help centre. The cost of switching these off is that old friends find you less easily. The benefit is that your account is not shown to an ex or a former colleague just because you share a phone book.

Downloads of your videos

TikTok has a control over whether others can download your videos, and its private-account help says people cannot download videos from a private account. A download setting cannot stop a screen recording, so assume anything others can see can be copied. Turning it off removes the easy route and keeps a clip from being re-posted with a different caption. The cost is that friends cannot save your video.

Ad personalisation and data

TikTok's Safety Center says the ads you see are influenced by settings in the app and on your device. We could not verify the app menu names, so use TikTok's privacy pages and your phone's tracking and advertising settings. Limiting personalisation does not remove ads; it changes how targeted they are. If you want to see what TikTok holds, the Safety Center says account holders can request a copy of their data at any time, covering things like profile, activity and app settings. Do it through the official help page, never through a stranger or a website offering to "retrieve" it.

Location

Two things matter. First, the phone's own permission for the app, which you control in your phone's settings: choose off, or approximate, unless you need precise location. Second, what the video shows. TikTok's Safety Center says it collects approximate location based on SIM card and/or IP address, so some signal remains regardless. A street sign, a school uniform or your front door in a video give away more than any setting. Posting after you have left a place costs nothing.

Third-party apps and viewer-tracker scams

You will see adverts for apps that say they show who viewed your profile or who unfollowed you. The pages we reviewed disagree on whether TikTok offers any profile-view history itself, and we could not confirm it on TikTok's own help pages, so check them for the current position. What the security guidance agrees on is that an outside app that asks for your TikTok password, a login code or payment is a red flag: it can take over the account or put you on a subscription trap. Never give a password or code to an app, even one your friends use. If you already did, change your password, turn on two-step verification and sign out of other devices.

Sign-in: two-step verification and alerts

Audience settings do nothing if someone logs in as you. TikTok's help steps put 2-step verification under Settings and privacy, then Security & permissions, and offer phone, email or an authenticator app, recommending you choose at least two. The Safety Center says it adds a layer in case your password is compromised. TikTok's Creator Academy also describes security alerts, which can flag things like password changes or a new device, and which can arrive by email, SMS or push notification if those are on. Use a unique password from a password manager, and read the alerts. Our Passkey Lab shows where passkeys fit.

Family Pairing and teen account defaults

TikTok's Guardian's Guide says accounts of younger teens are private by default, and its Family Pairing help page says direct messaging is only for accounts aged 16 and over and that a linked parent can restrict who can message a teen or turn messaging off. Other pages describe defaults for under-16s, such as no Duet or Stitch and not being suggested to others, but those pages differ in age and detail, so check the current help pages for your region. The practical approach is to set up Family Pairing together, agree who may follow the account and agree what to do if a stranger writes. Settings help; a child who can show you a creepy message without being punished helps more.

How to tell it is working

• When you view your profile from a logged-out browser or a friend's phone, you see only what you intended.
• Your followers are people you recognise. Remove the rest.
• The security area shows only your own devices, and you can see the alerts.
• Your message and comment settings are the ones you chose, not the defaults.
• A search for your name and username shows what you expect; our Digital Footprint Check can help.

Prevent it next time: a checklist

• Revisit these settings every few months and after any app update.
• Keep the account private unless it is a business or a creator account.
• Set comments and messages to Friends or narrower.
• Switch off suggestions and contact syncing you did not choose.
• Keep two-step verification on, with at least two methods.
• Do not log into any app that promises profile views, and never share a code.
• Request your data once a year to see what is held.

Frequently asked questions

How do I make my TikTok account private?

TikTok's help material says that on a private account only followers you approve can watch your videos, and that people cannot Duet, Stitch or download them. The setting sits in the privacy part of the app's settings; the exact path changes, so follow the official help page for the current steps.

Can I stop people commenting on my TikToks?

TikTok's help material lists three comment choices, Everyone, Friends and Off, which you can set for the whole account or for a single video. Friends means people who follow you and whom you follow back.

Who can send me a direct message on TikTok?

TikTok says direct messages can be set to Everyone, Friends or No one, and that they are only available to registered accounts aged 16 and over. Family Pairing lets a parent restrict who can message a teen or turn messages off.

Can I see who viewed my TikTok profile?

The pages we reviewed disagree on whether TikTok offers any profile-view feature, and we could not confirm it on TikTok's own help pages, so check them yourself. What is clear is that a third-party "viewer tracker" that asks for your password or payment is a classic scam.

How do I turn on two-step verification on TikTok?

TikTok's help steps point to Settings and privacy, then Security & permissions, then 2-step verification, where you can pick phone, email or an authenticator app. TikTok recommends choosing at least two methods. Menus change, so confirm on the help page.

Can I download my TikTok data?

TikTok's Safety Center says account holders can request a copy of their TikTok data at any time, covering things like profile, activity and app settings. We could not confirm the exact menu path, so use TikTok's data request help page.

Sources

• TikTok Support: Making your account public or private
• TikTok Support: Family Pairing
• TikTok Safety Center: Privacy and security on TikTok
• TikTok Safety Center: Guardian's Guide
• TikTok Safety Center: Community controls
• TikTok Creator Academy: Security FAQs

This is general guidance. TikTok's menus, defaults and wording change by version, age group and region, and the help pages above sometimes show only a shell to automated readers; follow them for the current steps. Where we could not read a page in full, the post says so.