Privacy Settings Checklist for WhatsApp, Instagram, Snapchat and Other Social Apps

Messaging and social apps hold some of the most personal information on your phone: conversations, photos, contacts, locations and the list of people you know. Yet many of us use them for years without opening the privacy settings once. Menus change, features are added, and defaults often favour sharing over caution. This guide gives a practical, plain-language checklist for WhatsApp, Instagram, Snapchat and similar apps on Android. Menu names can shift between versions, so use the wording below as a map rather than an exact script.

Principles that apply to every app

Before looking at individual apps, a few ideas will serve you everywhere.

Share with the smallest audience that makes sense. A holiday photo for close friends does not need to be visible to everyone.
Assume that anything you post can be saved or forwarded. Even content that disappears can be captured by another person's screenshot or camera.
Protect the account first. A strong, unique password and two-step verification matter more than any other setting, because they stop other people from taking over your account.
Review settings after major updates. New features often arrive with their own switches.

Secure the account itself

Account takeover is the most damaging problem for ordinary users. Scammers often hijack an account and then message the owner's friends asking for money or verification codes. You can reduce that risk in a few steps.

Use a password that you do not use elsewhere. A password manager makes this easy.
Turn on two-step or two-factor verification wherever it is offered. In WhatsApp, this is found under Settings, Account, Two-step verification, where you set a personal PIN. Instagram and Snapchat offer two-factor authentication in their account or security settings.
Never give a six-digit login code to anyone, including a friend whose account appears to ask for it. Genuine services do not ask you to forward codes.
Review linked devices and active sessions. WhatsApp lists them under Linked devices, and other apps list logged-in devices in their security pages. Remove any you do not recognise.

WhatsApp: the key settings

WhatsApp messages are protected by end-to-end encryption, meaning that only the people in the conversation can read them. That protects content but not everything about your profile, so look at the Privacy section in Settings.

Last seen, profile photo and About: choose whether everyone, your contacts or nobody can see them. Many people choose contacts only.
Who can add you to groups: set this to contacts, or to selected contacts, to avoid being added to unwanted groups.
Read receipts: you can switch them off if you do not want senders to know when you have read a message, although this works both ways.
Disappearing messages: you can apply a timer to a chat so that messages vanish after a set period. It helps with sensitive information, but remember that recipients can still save content.
Chat backups: backups to cloud storage may follow different protection rules from live chats. Check whether encrypted backup is available and enable it if you want extra protection.

Be careful with forwarded messages that promise prizes, free data or urgent warnings. Pause before you pass them on, and search for the claim first.

Instagram: control who sees and contacts you

Instagram mixes private updates with public content, which makes audience control especially important.

Private account: in Settings and privacy, the account privacy option lets you approve followers. It is a simple way to keep posts among people you know.
Close Friends: create a list for Stories that you do not want to share widely.
Messages and replies: choose who can message you and who can reply to your Stories. Message requests from strangers can be filtered or ignored.
Comments and mentions: you can limit who can comment, hide offensive words automatically and control who may tag or mention you.
Restrict and block: Restrict quietly limits an unwanted person's interactions without alerting them, while Block removes contact completely.
Location and tags: consider whether you want to share your exact location on posts, especially for your home or your child's school.

Snapchat: camera-first, so think about visibility

Snapchat is designed around quick, casual sharing, and many features relate to who can reach you and where you appear.

Contact me and view my Story: in Privacy controls, set these to friends rather than everyone.
Quick Add: decide whether you appear in suggestions to people you do not know. Turning this off reduces unwanted friend requests.
Snap Map: the map can show your location to friends. Ghost Mode hides it, and you can also choose specific friends. Consider carefully who really needs to know where you are.

Remember that a snap that disappears from the app has not necessarily disappeared from the other person's device. Treat anything you send as potentially permanent.

Facebook and X: audience and discoverability

On Facebook, the privacy checkup tool walks you through the audience for posts, how people can find you and which apps are connected to your account. Review the default audience for new posts and limit old posts if you have shared publicly in the past. On X, which centres on public conversation, you can protect your posts so that only approved followers see them, control who can reply and mute words or accounts that you do not want to see. Public platforms reward visibility, so decide in advance what you are comfortable having associated with your name.

Permissions and connected apps

Outside the apps themselves, Android controls what each app can access. Open Settings, then Apps, choose the app and review Permissions. A social app may legitimately need the camera, microphone and contacts, but you can limit location to "only while using the app" or deny it. Android also shows a privacy dashboard in many versions, revealing which apps recently used sensitive permissions. Finally, review third-party apps that you connected with a social login. Remove services you no longer use, as each one is another place holding some of your data.

Protecting children and teenagers

Young people benefit from platforms with strict default settings, but no setting replaces conversation. Agree on basic rules together: keep accounts private, accept requests only from people you know offline, never share school names, addresses or daily routines, and tell a trusted adult if someone makes you uncomfortable. Check each platform's minimum age and family tools, and use Google Family Link if you wish to guide app installs and screen time.

A fifteen-minute privacy routine

Update each app so that you have the latest security fixes.
Turn on two-step verification in every account.
Set profile information to contacts or friends only.
Review who can message, add or tag you.
Check location sharing and linked devices.
Remove apps and connected services you no longer use.

Privacy is not about hiding. It is about choosing deliberately who sees what. Spending a quarter of an hour on these settings, and revisiting them a couple of times a year, makes social apps far more enjoyable, because you can share freely with the people who matter and keep everyone else at a comfortable distance.