TikTok tool guide: accounts, audiences and sensitive video

TikTok is built for publishing short videos and following public trends, not for keeping confidential material. Before you create an account or upload a new video, decide who the audience is, whether people in the frame have consented, and what should never be here. Privacy settings shrink the circle; they do not turn the app into a confidential channel.

Reducing public disclosure on social networks more generally is covered in reducing social-media disclosure. If you keep online identities apart, keep the guide to separating online identities next to this page. Image and video metadata is covered separately in removing identifying information.

Before you create or keep using an account

1. Write down who this account is for: a public audience, a limited circle, or organizational work. One account cannot do all three well at once.
2. If your face, voice or location should not be tied to your real identity, do not choose TikTok for that job. A face filter and a display name do not create real separation.
3. Decide what will never be uploaded: an internal document, a home scene that shows an address, the face of someone who did not consent, a uniform or a workplace sign.
4. If the account has a work role, keep it separate from a personal account and do not build it with the same number and the same personal email.
5. Get the app only from the official Apple or Google store, or from the path announced on tiktok.com. Set aside an installer from a messenger or a “direct download” site.

A unique password and account details

A TikTok account is only as strong as its password and recovery path. A password reused with email or a store means a breach of one service can open this account too.

1. Create a unique password in a password manager; do not share it with another account.
2. In the app open Profile, then the Menu button and Settings and privacy.
3. Go to Account, then Account information, and see which number and email are linked. If you do not want your personal number here, use a number created for this identity.
4. Change the password from this account area or from the security path, and store the new password only in the password manager.
5. After you change it, review open sign-ins on devices you do not recognize in the security checkup.

Walk through the security checkup once

TikTok has a list called Security checkup that gathers several account tasks. The list does not replace your judgment, but it helps you notice something left undone.

1. Open Profile > Menu > Settings and privacy > Security & permissions > Security checkup.
2. Link and verify a phone number and email if you want an official recovery path. Think about how closely that same number and email are tied to your everyday identity.
3. Turn on two-step verification from this list or from its separate option; the exact steps are in the next section.
4. Review trusted devices. Set aside a device you do not recognize and confirm sign-in again later.
5. Review recent security activity. If you do not recognize a sign-in or a change, change the password and go to the guide to recovering a compromised account.
6. If your device supports a passkey, you can add one. A passkey makes signing in on that device easier; it is not a complete substitute for a separate second-factor method and a recovery code.

Turn on two-step verification properly

TikTok calls this 2-step verification. The app usually asks you to choose at least two methods: Phone, Email, Authenticator or Password. SMS on its own is weaker than an authenticator app, because a number can be moved to another SIM.

1. Make sure you have the latest official version of the app.
2. Open Profile > Menu > Settings and privacy > Security & permissions > 2-step verification.
3. Tick at least two methods. Make Authenticator one of those two, and install the authenticator app from that phone’s official store.
4. Add the QR code or key in the authenticator app and enter the code it generates at that moment into TikTok.
5. If TikTok gives a recovery code when you set up the authenticator, write it down outside the phone and outside TikTok itself. Without that code, losing the phone can stall sign-in for weeks.
6. Add Phone or Email as a backup, not as the only method. If you have not yet entered a number or email, the app will ask you to verify it there.
7. Tap Turn on and sign out and back in once to see that a code is requested.

If you lose access to the authenticator app, TikTok offers Can’t access the app and asks for the recovery code from setup. If you do not have that code either, the Need more help path can take up to about thirty days. That is another reason to keep the recovery code separately on the first day.

Cut access for third-party apps

Apps and sites that promise extra followers, deep account analytics or scheduled posting often want to connect to the account. That access can give them the profile, public content or the ability to act on your behalf. You are not sharing the password with them, but you are granting a permission.

1. Do not grant those tools access in the first place, especially if they are unknown or ask you to sign in from a link in a message.
2. To see existing connections open Profile > Menu > Settings and privacy > Security & permissions > Apps and services permissions.
3. Open each app separately, see what it can access and tap Remove access if you no longer need it.
4. Write down the names of apps you do not recognize and cut those.
5. Look at the same list again a few days later to make sure an unwanted connection has not returned.

Make the account private if you need to

A private account shrinks the circle of people who can see videos, the profile bio and follower lists: only people you approve. Even on a private account, the display name, username and profile photo are usually visible to others. Privacy does not fully stop screenshots, saving with another device or republication outside the app.

1. Open Profile > Menu > Settings and privacy > Privacy.
2. Turn on Private account if the audience should be limited.
3. Review follow requests one by one; do not approve an unknown follower based on how many accounts they follow.
4. If the account must stay public because being seen is the work, at least tighten comments, reuse and downloads separately; the next section covers that.
5. For each video you can also limit the audience of that post on the publish screen. A global setting is not a substitute for reviewing that same video.

Comments, reuse of content and downloads

Other people can continue a public video with a comment, a Duet, a Stitch or a download. Even if you later take the original down, a reused copy may remain unless you manage it separately.

1. Open Settings and privacy > Privacy > Comments and set Allow comments from to Friends or, on a private account, to Followers if public comments are not needed.
2. For a specific video, turn off Allow comments under More options before you publish, or change Privacy settings on that post after it is up.
3. Open Privacy > Reuse of content. Limit Allow reuse of content from. Allowing Duet usually requires a public account; if you do not want the video continued inside someone else’s video, limit reuse from the start rather than being surprised later.
4. To see reuse history, open Reuse of content history in that same section or Settings and privacy > Activity center > Reuse of content history. Removing associated posts in bulk may also remove the original video; download it first if you still need the original.
5. Open Privacy > Downloads and turn Video downloads off if you do not want others saving the file on their device. Turning it off does not stop someone sending a link, and it does not erase copies already downloaded. On a private account this option is usually off already.

Account suggestions and syncing contacts

TikTok can suggest the account to phone contacts, Facebook friends, or people who opened or sent a link to your video. For adults some of these options are on by default. If you keep identities apart, take this section seriously.

1. Open Settings and privacy > Privacy > Suggest your account to others.
2. Turn off Contacts, Facebook friends and People who open or send links to you if you do not want the account found from an address book or an outside link.
3. Even with all of these off, TikTok may still suggest the account to people you follow or interact with. The setting is not complete separation.
4. Open Privacy > Sync contacts and Facebook friends and turn off syncing contacts or Facebook friends. If synced data was already sent, also use the option to remove that data.
5. In the phone’s own settings, revoke TikTok’s access to contacts so syncing is not repeated at the device level.

Do not treat in-app messages as a confidential space

TikTok direct messages are built for public coordination or replies to an audience, not for material that should not sit with the service or on the other person’s device. Do not assume end-to-end encryption here. Links in messages or in a video caption can be phishing.

1. Open Settings and privacy > Privacy > Direct messages.
2. Set Potential connections and Others on TikTok to Don’t receive if you do not want message requests from people far outside your circle. On a private account, people who do not follow you usually cannot send a request.
3. Turn off read status if you do not need it; the control is Read status on the same page.
4. Do not open a message request from an unknown sender if it has a short link or a file. Read the address with your own eyes and do not sign into another account from inside the message.
5. Move sensitive material to a messenger whose conversation is end-to-end, not into the TikTok inbox.

Following lists, likes and activity status

Even without watching your videos, other people may infer what you care about and who you are connected to from the list of accounts you follow or the videos you like. A private account shrinks that circle, but it does not necessarily hide the same list from approved followers unless you set that separately.

1. Open Settings and privacy > Privacy > Liked videos and choose Only you if you do not want likes shown on the profile. On a new account this section is usually hidden by default; check it once anyway.
2. Open Privacy > Following list and set the list to Only you if you do not want others to see which accounts you follow.
3. Open Privacy and leave Activity Status off unless you really want mutual followers to see when you are online. The feature is not available at younger ages and is off by default.
4. To shut out a harassing account, use Block on that person’s profile. You can later see the list at Privacy > Blocked accounts.
5. Removing a follower on a private account takes video access away from them, but does not guarantee they will not notice. If a personal risk is involved, make that change carefully and, if needed, with someone who understands the situation.

Keep a work account apart from personal life

If TikTok is part of your work — news, teaching, an organization — do not mix that same account with a family gallery, a home location and a private number. Identity separation is covered in its own guide; here are the concrete steps for this app.

1. Sign in with an email and number created for that work role, not with a personal store or other-network account.
2. Do not leave a shared family device signed into the work account. If you must use the same phone, use a strong password, two-step verification and an app lock, and sign out when you finish.
3. Do not go live with work video from a place that shows your home or everyday route.
4. If several people need one organizational account, do not put the password in a chat; use an official team-access path if your account has one. Otherwise keep shared sign-in to a minimum and change the password after people change.

Look at what a video reveals before you upload it

A face, a voice, a place, a uniform and writing on a desk can all identify someone. A street sign, a reflection in glass, a file name on a computer screen or an announcement at a station can do the same. Do this review before you tap publish, not after the first comment.

1. Watch the video once without sound and once with only the sound. Something invisible in a normal frame is sometimes obvious in the audio.
2. Look at the background frame by frame: a plate, a map, a business card, a document on a desk, a uniform, an organization badge.
3. If you film at home, a window, repeated décor and ambient sound can build a pattern of life. A livestream shows that pattern in the moment.
4. People in the frame should know where their image is going. Consent after publication is too late.
5. Read on-screen text and captions separately; sometimes a given name, a place or an exact time is written there.
6. If you are unsure, do not publish. TikTok is not the place to trial-and-error sensitive material.

Filters and crops are not always enough

A face filter, a crop at the edge of the frame and a popular effect do not always remove metadata or a revealing background. Coordinates, a device model or an original file name may still sit in the copy you pick from the gallery. How to check is in the identifying-information guide.

1. Instead of sending a raw camera file, export a fresh copy and upload that if something must be published.
2. Do not leave a location sticker or place name on the publish screen unless the place is part of the public message.
3. In the phone’s settings, turn off TikTok’s location access if you do not need it for the work: on iPhone, Settings > Privacy & Security > Location Services > TikTok, and on Android, App info > Permissions > Location.
4. Do not give the app the whole gallery if you can pick only that one video. Broad access means the app can also see photos you never meant to upload.
5. After you publish, watch the video once from another account or while signed out so you see what others actually see.

Taking a video down does not erase other copies

If you remove something from the profile, do not assume no copy remains in a cache, someone else’s download, a Duet, a Stitch or an outside republication. Turning downloads off from now on does not pull back files already saved.

1. Do not put something here if you may regret publishing it. Prevention is not the same as deleting later.
2. If you must take a video down, also check reuse history and follow outside links separately.
3. Ask your main audience, through a channel outside TikTok, to delete a saved copy if the relationship makes that request meaningful; there is no guarantee.
4. For later work, tighten download and reuse settings so the circle is smaller.

Links, trends and fake sign-in pages

Many account takeovers start with a message that says “your video was reported” or offers a prize and a verification badge. A real TikTok sign-in page comes from the app itself or from an official domain, not from a short link in a message.

1. If a message says the account is at risk, open the official app from the icon on your phone and look at Settings and privacy; do not tap the link in the message.
2. Do not give a password or a verification code to someone who claims in a message to be TikTok support. Real support does not ask for your two-step code in a direct message.
3. A web page that looks like TikTok but has another address is phishing; read the address letter by letter.
4. If you did open a suspicious page and typed the password, change it immediately from the official app, review the security checkup and cut third-party app access.

If you think someone else has the account

1. Sign in from a device you trust more and change the password.
2. Review two-step verification; remove a method that is not yours and rebuild your own.
3. Look at trusted devices and security activity in Security checkup.
4. Review access for every third-party app and cut it if you are unsure.
5. Check videos and the profile bio for a change you did not make.
6. Fuller steps are in the guide to recovering a compromised account; follow those, then change passwords on accounts that shared the same secret.

Download a copy of your own data if you need it

If you want to leave the work, keep a personal archive, or see what was in the account after an incident, TikTok lets you request your data. The file may include messages and history; treat it like a sensitive document.

1. Open Profile > Menu > Settings and privacy > Account > Download your data.
2. Choose all data or a custom selection and pick a format.
3. Tap Request data and wait for the app to say it is ready; timing depends on the size of the account.
4. Store the file somewhere safe, not in a shared gallery and not in a public chat.
5. A data download is not a substitute for keeping regular copies of original videos on your own device. Keep the original before you rely on the network.

Common mistakes

• Assuming a private account means nobody can save or republish the image.
• Turning on two-step verification with SMS only, without an authenticator app and without writing down the recovery code.
• Granting access to a “follower growth” app.
• Going live from home and then regretting the pattern of life that was visible.
• Using TikTok messages for confidential coordination.
• Combining a work account and a personal gallery on the same sign-in.
• Tapping a “your account has been restricted” link in an unknown message.
• Assuming that deleting a video also removes earlier Duets and downloads.

What to do today

1. Turn on two-step verification with at least two methods and make Authenticator one of them; write the recovery code down outside the app.
2. Open Apps and services permissions and cut access for third-party apps you do not recognize.
3. Review a recent video for place, faces, writing and sound; if it should not stay public, take it down and check reuse as well.
4. Move anything that should not be public off this app, and do not put it here again.
5. Turn off suggesting your account to others and syncing contacts if you keep identities apart.
6. Limit incoming messages, and do not open links inside a message from the app’s own screen alone without reading the address.