CyberSmarts for Seniors: Detailed Guide to Social Media Safety and Privacy Settings
Facebook connects millions of people with family and friends, but its default settings are designed for maximum sharing, not maximum privacy. Most people set up their account once and never revisit those settings; meanwhile, their personal information remains visible to far more people than they realize. This guide gives you direct, specific steps to close those gaps and use Facebook with genuine confidence.
(A quick guide with the key points from this resource can also be downloaded as a PDF so you can read it anytime, even if you are offline. Click here to download your copy.)
SECTION 1: Step-by-Step Facebook Privacy Settings
Facebook's privacy controls are more powerful than most people know; the problem is simply finding them. The settings covered here are the ones that make the biggest practical difference, and most take less than a minute to change. You only need to do this once, and the improvements to your privacy are immediate.
1A: Getting to Your Privacy Settings
Facebook updates its layout regularly, which means the menus you see today may look slightly different from what a friend described last month. The steps below reflect the current layout, and there is also a direct shortcut included in case the menu proves hard to find. Once you have reached the privacy settings page, keep it open while you work through the changes in Section 1B.
Follow these steps on your computer or device:
-
Log into Facebook.
-
Look for the down arrow (or your profile picture/icon) in the top right corner.
-
Click "Settings & Privacy".
-
Select "Settings".
-
Find "Privacy" in the menu on the left side of the screen.
Tip: If you cannot find the settings because Facebook frequently updates its layout, you can also try typing "facebook.com/settings/privacy" directly into your web browser's address bar.
1B: Essential Settings You Must Change
Facebook's factory defaults lean heavily toward public sharing; what follows targets the four settings that expose the most personal information to strangers. Each one includes a plain explanation of the actual risk, so you understand why the change matters rather than simply being told to make it. None of these changes affect your ability to post, connect with friends, or enjoy Facebook normally.
These are the most important settings for keeping your profile safe and private.
Setting 1: Who Can See Your Posts
Why this matters: If this is set to "Public," anyone in the world can see what you post. You must change this to limit who sees your personal information.
Action:
-
Click the dropdown next to "Who can see your posts".
-
Select "Friends" only.
Setting 2: Who Can Send Friend Requests
Knowing your privacy settings are correct is only half the picture. The other half is developing a quick instinct for what kinds of information are safe to share in the first place. The good news is that this comes down to one simple question, and the examples below make the answer easy to recognize.
Why this matters: If this is set to "Everyone," you might get friend requests from strangers or professional scammers. Limiting this setting is a crucial defense against fake profiles.
Action:
-
Find the setting "Who can send you friend requests".
-
Change this setting to "Friends of friends". (This means only people who know someone you already know can send you a request).
Setting 3: Phone Number and Email Privacy
Why this matters: By default, these pieces of personal information are often set to "Everyone," which means strangers can find your Facebook profile simply by having your phone number or email address.
Action:
-
Find the settings for your phone number and email privacy.
-
Change both settings to "Friends" only.
Setting 4: Search Engine Linking
Why this matters: This is a hidden danger. If it is turned on, your Facebook profile will appear when someone searches for your name on Google or another public search engine. You need to turn this off to keep your profile private from general web searches.
Action:
-
Find the question: "Do you want search engines outside of Facebook to link to your profile?".
-
Turn this setting OFF.
SECTION 2: Safe Sharing Guidelines
Knowing your privacy settings are correct is only half the picture. The other half is developing a quick instinct for what kinds of information are safe to share in the first place. The good news is that this comes down to one simple question, and the examples below make the answer easy to recognize.
The key to safe sharing is ensuring your posts are general and do not reveal personal details that can be exploited by scammers.
2A: Examples of What is Safe vs. Dangerous to Share
The line between a harmless post and a risky one is not always obvious; it often comes down to specific details rather than the topic itself. A post about enjoying lunch with friends is completely fine. The same post with the restaurant name, your neighbourhood, and the time you will be home is a different matter entirely.
|
Example |
Safety Status |
Why? |
|
"Had a lovely lunch with friends today" |
✅ Safe |
It is general and does not reveal specific personal details. |
|
"Leaving for vacation in Florida tomorrow" |
❌ Dangerous |
It tells potential criminals exactly when your home will be empty. |
|
"My grandchildren are so smart" |
✅ Safe |
It is general praise. |
|
"Little Emma got an A+ at Lincoln Elementary" |
❌ Dangerous |
It gives too much specific information (name and school) that scammers can use. |
2B: What Never to Share
Some categories of information carry enough risk that the rule is simply never to post them, regardless of context or how innocent the post seems. Scammers are skilled at piecing together small details from multiple posts to build a picture they can exploit. The categories below are worth memorizing because the consequences of sharing them can be serious and long-lasting.
You should never, ever share anything about the following:
-
Financial Information: This includes bank account numbers, details about how much you have in savings, or even photos of lottery tickets or casino winnings. Sharing a photo of a $20 scratch-off winner once led to a student being contacted by three different 'lottery officials' about 'unclaimed prizes' within a week.
-
Personal Details: This information can be used to steal your identity or break into your home. Never share:
-
Your full birth date
-
Your home address
-
Your phone number
-
Travel plans while you are away from home
-
Family Information (That can be exploited): Scammers use this information for "grandparent scams," where they call pretending to be your grandchild in trouble. Never share:
-
Your grandchildren's schools
-
Details of family emergencies
-
Information about who lives alone
Your Action: Take a few minutes to look at your recent posts and identify anything that contains dangerous information that you should delete.
SECTION 3: Scam Recognition: How to Spot Fakes
The scams targeting seniors on social media follow remarkably predictable patterns; once you know what to look for, they become much easier to spot. Most rely on creating either strong emotion or a sense of urgency, because both interfere with careful thinking. The checklists and examples below give you a reliable filter you can apply when something feels slightly off.
If you encounter a friend request or message from a stranger, use this checklist to decide if they are real.
3A: Fake Profile Red Flags
Fake profiles are built to look convincing at first glance, but they consistently share the same telltale weaknesses. Scammers invest effort in a profile photo and very little else; a closer look almost always reveals the gaps. The checklist below tells you exactly where to look and what an authentic profile typically shows by comparison.
Scammers create profiles using specific characteristics.
|
Area to Check |
What to Look For (Red Flags) |
|
Profile Photo |
Too perfect: Professional-quality, often posed or stock-looking. Too few: Only 1–2 photos total. Suspicious content: Photos in military uniforms (often used in romance scams). Missing: No photos with friends or family. |
|
Communication |
Urgency: Asking personal questions immediately. Isolation: Wanting to move the conversation to private platforms like email or WhatsApp quickly. Love Bombing: Claiming to be falling in love within days. Excuses: Always having excuses for why they cannot meet in person. |
3B: Common Scam Types
The three scams described here account for the vast majority of fraud targeting seniors on social media. Each follows a recognizable script, and understanding that script is your best protection. Knowing how a romance scam unfolds over weeks, for example, makes it far harder for a scammer to move you through the stages without you noticing.
These are the most common scams targeting seniors on social media.
-
Romance Scams (Most Dangerous):
-
A beautiful profile sends a friend request.
-
They send daily messages and start claiming to be falling in love (Week 3–8).
-
They create reasons they can't meet (deployed overseas, sick relative).
-
The scam culminates with a sudden emergency where they need money (Week 13+).
-
Key Warning: If someone you've never met asks for money, it's ALWAYS a scam.
-
Prize/Lottery Scams:
-
They send messages like: "Congratulations! You've won $50,000!".
-
Remember: If you didn't enter, you didn't win.
-
Shocking Video Scams:
-
These appear as messages like: "You won't believe this video of you!".
-
Never click these links—they are designed to steal your password.
SECTION 4: Daily Safety Habits and The 24-Hour Rule
Strong privacy settings and scam awareness are most effective when paired with a few consistent habits. None of what follows requires much time; the goal is to build a brief, automatic check into activities you are already doing. Small routines practiced regularly provide far better protection than occasional large efforts.
Creating simple routines helps ensure your ongoing safety.
Before You Post: Ask Yourself These Three Questions
Before clicking "Post" on any update, use this checklist:
-
Would I tell this to a stranger on the street?
-
Does this reveal where I am or when I'll be away?
-
Could this information be used to hurt me or my family?
The 24-Hour Rule
For big news—like trips, purchases, or family events—wait 24 hours before posting. This delay gives you time to think about whether the information is truly safe to share.
Weekly Safety Check
Make time once a week to do the following:
-
Review your recent posts.
-
Check friend requests carefully.
-
Remove any apps you don't use.
Common Questions and Answers
-
Q: What if I accidentally accept a fake friend request?
-
A: Don't panic! Block them immediately and remove them from your friends list. Check what they might have seen and consider changing your privacy settings.
-
Q: My grandchildren want me to post photos of them. Is that safe?
-
A: Ask their parents first, and never include their school names, ages, or locations. Keep those photos shared to "Friends only" or create a family-only list for extra privacy.
-
Q: How do I know if someone is real?
-
A: Real people will video chat with you, have mutual friends, and won't ask for money. When in doubt, ask a family member or trusted friend for advice.
Quick Reference Red Flags Checklist
Keep this checklist in mind whenever something feels suspicious:
❌ Asks for money
❌ Won't video chat
❌ Too good to be true
❌ Pressure to act quickly
❌ Asks for personal information immediately
.
Return to the CyberSmarts for Seniors Introduction:
CyberSmarts for Seniors: Practical Lessons to Build Digital Confidence and Safety
.
.
This resource is part of the CyberSmarts for Seniors Project, funded in part by the Government of Canada’s
New Horizons for Seniors Program and ELNOS, and delivered in Elliot Lake by Raknas Inc. and Golden Voices, the seniors-focused division of the DiversityCanada Foundation.
.
Download PDF
How to download a quick guide with the key points of this article as a PDF:
—Click the File Name below (in blue).
— If your device is set up to download automatically, the file you just clicked will be saved where your downloaded items can be found (usually in your Downloads folder or Desktop).
—If your device is not set up to download automatically, a dialogue box should pop up.
—Click Save.
—According to your device settings, the file may now be saved where your downloaded items can be found (usually in your Downloads folder or Desktop).
—Alternatively, your device may show you a window, and you will have the chance to choose a location where you want to save the file. Choose a place that's easy to find, like Downloads, Documents, or Desktop.
—The PDF will be downloaded to your device.
—You can now open it anytime in the future, even without an Internet connection.
Admin