Security FAQs

The safety and security of our community is of utmost importance to us. We place great importance on the measures we can take to help protect our users and their information. Our teams continuously work to keep our community safe, but we are also sharing FAQs to empower our users to practice good security habits which can better protect their accounts. Here we’ll cover some steps you can take to keep your account secure.

What are security alerts?

Security alerts are alerts that may indicate suspicious behavior, such as a recent password change, new device being used, and more. Our global security team works around the clock to proactively detect and prevent malicious actors from harming the platform. To keep our community informed, we have TikTok accounts, like @tiktoktips, that provide recommendations, such as running security status checks on your accounts. You can monitor recent unusual security events that you do not recognize using the “security alerts” tab, which can be found within the security tab in your account settings.

How do you create a secure password?

A safe experience on TikTok begins with a secure password. When creating one, think about using a password that’s memorable for you but difficult to guess for others. Strong passwords are usually at least 12 characters long and contains a mix of letters, numbers, and symbols.

Be sure to set up strong and unique password/PINs for all devices you use to access TikTok, such as laptops, phones, and other mobile devices. A password manager can help take the guesswork out of remembering dozens of unique usernames and passwords.

What is two-step verification?

Adding two-step verification is an easy way to safeguard your account. In the event that your password has been compromised, two-step verification provides an extra layer of security to protect your account from unauthorized access from third-party devices or applications.

To enable two-step verification, first go to your profile and select the “…” icon. From there, simply select the security tab and change two-step verification to “on.”

How do you avoid phishing attacks?

Phishing attacks occur when someone is tricked into giving up any of their personal information, including passwords, credit card numbers, or other sensitive data. Warning signs of phishing can also commonly include promises for verified badges on TikTok. We commonly see this as an emailed phishing attack for creators. We would recommend being cautious with any of these or similar online activities, as these could be phishing attacks attempting to gain access to your login information.

Keep this in mind: No legitimate email from any member of TikTok’s teams would ever ask for your password.

How can I verify the devices used to access my TikTok account?

You can view phones and other mobile devices that are currently logged in or which have accessed your account recently by visiting the “Verify your devices” tab under your security settings. This will display all devices associated with your account, how you logged into the account (e.g., Facebook account), and when. Check this information to make sure no one else has signed in to your account, and remove any devices you do not recognize.

Where do I report suspicious activity?

If you find or receive videos, websites, in app-messages, or emails pretending to be TikTok that you think might be spam or phishing, please report them so our teams can continue to keep our community safe. To do so:

1. Go to Me.

2. Tap … , located on the top right corner.

3. Tap Report a problem.

4. Select a report topic.

5. Submit your feedback and provide a contact email.

You can also report suspicious videos by holding down on the video in question and tapping “report.”

Tag us to share what you learned from the #creatorportal.