How to Audit Your Social Media | A Cybersecurity Perspective

Most advice about auditing your social media focuses on looking professional. For a deeper dive, see The Art of Invisibility. Clean up your profile so employers like what they see. Remove those college photos. Present your best self online.

That advice is fine as far as it goes, but it misses the real reason you should audit your social media: security. Your posts, photos, check-ins, and tagged content are an intelligence file that criminals, scammers, and predators can use against you and your family. I spent 20 years managing technology and cybersecurity at the enterprise level, and I can tell you that what most people share publicly on social media would make a professional security auditor’s head spin.

This is not theoretical. People have been targeted for burglary because vacation posts revealed an empty house. Families have received virtual kidnapping calls from scammers who knew their children’s names, schools, and schedules from public social media posts. Teenagers’ photos have been stolen from public accounts and used to create fake dating profiles. The information was all freely available because nobody thought to audit what they were sharing.

What Criminals Learn from Your Social Media

Think about your social media the way a criminal would. For more, see expert tips to master social media etiquette. What could someone learn about you from your public posts? For more, see brilliant ways to leverage your book with social media.

Geotagged photos reveal your home address, your workplace, and the places you visit regularly. Check-ins at restaurants and airports tell people when you are away from home. Photos of new purchases advertise what is worth stealing. Posts about your children’s schools, sports teams, and activity schedules tell predators exactly where to find them and when.

For less than $50, a criminal can purchase detailed profiles from data brokers that include your income range, purchasing habits, and psychological triggers. Your social media fills in the rest: your daily routines, your relationships, your vulnerabilities.

Here is a test from my book Family Cybersecurity: review your family’s social media activity as if you were planning to rob yourselves. What would you learn about your schedules, your financial situation, and your security gaps? If the answer makes you uncomfortable, you have work to do.

The Professional Consequences Are Real

The security angle is the most important reason to audit, but the professional consequences are real too. Employers search candidates’ social media. Loan officers check it. Business partners look you up before signing deals. Your digital footprint makes first impressions before you ever get the chance to.

The cases are well documented. Kevin Hart stepped down from hosting the Oscars after old tweets resurfaced. James Gunn was fired from the Guardians of the Galaxy franchise over old social media posts (and later rehired after massive public support). Roseanne Barr had her show cancelled after a single tweet. Gilbert Gottfried lost a major endorsement deal over tweets about a tsunami.

These are public figures with massive platforms. But the same dynamic plays out at every level. A hiring manager who finds inflammatory posts from a job candidate moves on to the next resume. A client who sees unprofessional content from a potential business partner finds someone else. You never hear about these consequences because the people making the decisions do not explain why they passed on you.

How to Actually Audit Your Social Media

Forget the 11-step guides. A social media audit comes down to three actions.

First, review everything you have posted and delete anything that creates a security risk or misrepresents who you are now. This includes posts that reveal your routines, your home location, your children’s schedules, or your travel plans. It also includes old content that no longer reflects your values or professionalism. Be ruthless. If a post does not serve you, it is serving someone else.

Second, lock down your privacy settings on every platform. Default settings on most platforms make your content more visible than you realize. Disable location tracking and geotagging. Control who can see your posts, tag you in photos, and contact you. Review these settings quarterly because platforms change their privacy policies and add new data collection features that are enabled by default without telling you.

Third, audit who you are connected to. The people in your network post content that reflects on you. If someone in your connections regularly shares offensive, inflammatory, or dangerous content, that association is visible to anyone looking at your profile. Disconnect from accounts that create risk.

The Virtual Kidnapping Problem

Virtual kidnapping is a scam where criminals call you claiming to have kidnapped your child and demand ransom. They do not actually have your child. They have your social media.

From public posts, they learn your children’s names, what school they attend, what activities they participate in, and what your work schedule looks like. They time the call for when you are away from home and your children are at school, making it impossible to immediately verify their safety. Then they use the specific details they gathered to make the threat sound credible.

The terror is real even though the kidnapping is not. Parents have paid ransoms before discovering their children were safe at school the entire time.

This scam works because people post detailed information about their families without considering who might use it. The solution is simple: stop posting your children’s school names, activity schedules, and location information publicly. If you want to share milestones with family, do it through private channels, not public feeds.

What to Stop Posting

Your home address or photos that reveal it. For more on building a massive organic following, see Richard’s interview with Dan Shinder. Your daily routines. Your children’s school names and schedules. Your travel plans before or during the trip (post vacation photos after you return). Photos of expensive purchases. Your full birth date. Your phone number. Information about your security system or lack of one. Posts about when your house will be empty.

None of this means you cannot use social media. It means being intentional about what you share and who can see it. The difference between smart social media use and dangerous social media use is not volume. It is awareness.

Make It a Habit

A social media audit is not a one-time cleanup. Platforms change their settings. You accumulate new content. Tagged posts appear without your control. Build a quarterly review into your routine: check privacy settings, review recent posts and tags, and remove anything that creates unnecessary risk.

The time investment is small. The protection it provides is significant. And unlike most security measures, this one costs nothing but attention.

For a comprehensive guide to protecting your digital life, see Family Cybersecurity: A Practical Guide to Protecting Your Digital Life. For more on how your digital presence affects your professional reputation, see The Ethical Workplace.

Schedule a free consultation to discuss your book project.

Frequently Asked Questions