Secure your account against hacks and phishing
Secure your TikTok account by turning on 2-step verification, using a unique strong password, reviewing logged-in devices regularly and never entering your login on links sent by DM or email. If others help manage your account, use official team or business tools instead of sharing your password.
Turn on 2-step verification
In the security section of your settings, switch on 2-step verification so a login from a new device needs a code as well as your password. Choose methods you control, such as your phone number, email or an authenticator option if offered.
Keep the phone number and email on your account up to date. If you change numbers, update it immediately so recovery codes do not go to someone else.
Use a strong, unique password
Create a long password you do not use anywhere else, ideally stored in a password manager. If one site is breached, a reused password lets attackers try your other accounts.
Never share your password with friends, agencies or 'growth services', even if they promise more followers.
Review devices and login alerts
Your security settings usually show which devices are logged in. Check it monthly and remove any device you do not recognise, then change your password.
Pay attention to security alerts in your inbox and email. A login alert you did not trigger is a sign to act straight away.
Spot phishing DMs and fake emails
Common scams claim your account has a copyright strike, a verification offer or a brand deal, and ask you to log in through a link. Real notices appear in your TikTok inbox or account status, so check there instead of clicking.
Never share a login code sent to you by text or email. Anyone asking for that code, even someone claiming to be TikTok support or a friend, is trying to take your account.
Share access safely with a team
If an assistant, agency or business partner helps with your account, look for official business or team management tools in TikTok's business products rather than handing over your login. Check what is currently available for your account type.
Give each person only the access they need and remove it when the work ends. If your account is hacked, use the in-app or help centre recovery process as soon as possible.
Frequently asked questions
What should I do if my TikTok account is hacked?
Try to reset your password and use the account recovery options in the app or help centre right away. Then turn on 2-step verification and remove unknown devices once you regain access.
Does TikTok ever DM me asking for my password?
You should never give your password or login codes to anyone in a DM. Check official notices in your app's inbox or account status instead of following links.
Is it safe to give my login to a social media manager?
It is safer to use official team or business access tools if available, so you can control and remove access without sharing your password.