Use Messenger securely: Protect chats and prevent account takeovers

Why messenger accounts are so coveted

If someone takes over your messenger account, they can write messages in your name – and that’s exactly what hackers do: they ask your contacts for money or codes. This is often accompanied by chain messages, fake contests, and links to malware. It only takes a few minutes in the settings to make your account significantly more secure.

Step 1: The registration PIN

Most messengers offer an additional PIN that is requested when logging in on a new phone (often called “two-step verification” or “registration lock”). Turn it on. Then, an intercepted SMS code alone won’t be enough to take over your account.

Step 2: Never forward codes

The most common trick: A contact writes “I accidentally sent you a code, can you forward it to me?”. In reality, it’s the code someone is using to log into your account on their device. Never forward confirmation codes – not to anyone.

Step 3: Check linked devices

Many messengers can also be used on a computer or tablet. Check the settings under “Linked Devices” to see if you recognize all the entries, and immediately log out of any unfamiliar ones.

Step 4: Adjust privacy settings

• Decide who can see your profile picture, status, and “last seen” – preferably only your contacts.
• Allow group invitations only from contacts; this slows down spam groups.
• Turn off read receipts if you don’t want others to see when you read a message.

Understanding end-to-end encryption

With end-to-end encryption, only you and the other party can read the messages – not even the provider. Check whether your messenger uses it by default for all chats. Many additionally offer a security code or QR code that allows you to mutually verify your accounts. If this code changes unexpectedly, ask the other person about it briefly via a different channel.

Don’t forget backups

Chat backups in the cloud are convenient, but not always encrypted. If your messenger offers encrypted backups with a separate password, turn them on.

Links, files, and chain messages

• Don’t open links from unexpected messages, even from acquaintances – their account might have been compromised. Our link check shows you where a link actually leads.
• Do not install apps or files sent to you via chat.
• Do not forward chain messages or “warnings” without verifying them first.

On the go

On public Wi-Fi, your messages are already protected by the messenger’s encryption. A VPN protects the rest of your phone’s traffic, such as when opening links and websites.

If your account has been taken over

• Log in again with your phone number – this often ends the foreign session – and then turn on the PIN.
• Warn your contacts via a different channel that messages from you might not be genuine right now.
• Report the incident to the messenger’s support.

Our First Aid page helps you with the next steps.