LOGIN
Turn on 2-step verification
The NCSC says that with 2SV on, even someone who knows your password cannot get into the account. Pair it with a long password made of three random words.
Four stepsWHAT THE NCSC SAYS
Lock the account,
mind the footprint.
Your socials are worth stealing.
Check your risk
TURN ON 2SVit takes minutes
A hacked account can be used to scam your friends, and the details on your profile can help criminals guess passwords or write convincing phishing messages. UK cyber security guidance comes down to a few settings and a little caution.
At a glance
- Switch on 2SV
- Never share a code
- Share less detail
- Three habits, safer accounts
35,434
Social media and email hacking reports, 2024
Up from 22,530 reports in 2023. Action Fraud said account hacking remained the most reported cybercrime.
REPORTS · ACTION FRAUD
≈ £1 million
Money lost to account hackers, 2024
Action Fraud said nearly £1 million was lost. The most common motives were investment fraud, ticket fraud and stealing the account itself.
LOSSES · ACTION FRAUD
TWO NUMBERS WORTH KNOWING
Account hacking
is still rising.
Both figures come from reports made to
Action Fraud, the UK's fraud reporting service.
Action Fraud named two common methods: on-platform chain hacking, where an impersonator asks friends for one-time codes, and leaked or phished passwords reused across several accounts.
A QUICK RISK CHECK
What is happening
on your account?
Pick a situation to see what UK guidance says. The bar shows how much risk the guidance links to it.
Based on National Cyber Security Centre guidance and Action Fraud's 2025 warning on account hacking. General information only.
THE SHORT ANSWER
One extra step
keeps most thieves out.
Hackers want your login, your contacts and your details.
Each has its own simple defence.
CONTACTS
Never pass on a code
In chain hacking, a taken-over account messages friends asking for a one-time code. The code is for the friend's own account, so sharing it hands that account over.
Check a situation
FOOTPRINT
Think before you post
Your digital footprint can help criminals steal your identity or write convincing phishing. Set privacy options so only the people you choose can see your posts.
See the numbers
FOUR STEPS FOR TONIGHT
Ten minutes now,
fewer worries later.
These come from the National Cyber Security Centre's advice for individuals and families. Each social platform has its own settings page for them.
Switch on 2SV
Start with your email and social media accounts. It can be turned on in minutes.
Use three random words
Make your email and social passwords long, unique and different from every other password you use.
Review who sees your posts
Check the privacy options and remove detail your followers do not need but a criminal could use.
Keep apps updated
The NCSC calls updating one of the most important and quickest things you can do. Turn on automatic updates.
IF YOU HAVE BEEN HACKED
Get it back,
then lock it up.
Signs include not being able to log in, changed security settings, messages you did not send, and logins from strange places or times. The NCSC says to use the provider's recovery pages, check your email for forwarding rules, then change the password on that account and any that share it.
Next, log out all other devices, turn on 2SV and warn your contacts to treat recent messages from you with suspicion. If you have lost money, tell your bank and report it to Report Fraud (in Scotland, call the police on 101).
Questions
Questions people ask
What is 2-step verification?
A second check, often a code sent by text or email, that proves it is really you. The NCSC says that even if a criminal knows your password, 2SV stops them accessing the account. It is also called two-factor authentication.
What is chain hacking?
Action Fraud describes a fraudster who takes over an account and messages the owner's friends, asking for an authentication code. The code is linked to the friend's own account, so sharing it lets the fraudster take that account too.
Why does my profile matter for passwords?
The NCSC says to avoid passwords built from birthdays, sports teams, family or pet names, because most of these can be found on your social media profile.
How can I spot a fake account?
The NCSC suggests checking when the account was set up, whether the name looks like random letters and numbers, and the follower count, while noting that followers can be bought.
What if a friend's post looks out of character?
Contact them another way, in case their account has been hacked, and report fake posts or accounts to the platform.
Sources
Where the facts come from
ABOUT THIS NAME
Interested in leasing doodlesocials.com?
doodlesocials.com is part of the DoodleSale portfolio. It isn't in an auction right now, but you can ask about leasing it.