Omid Farhang
Table of Contents
Communicating by using an instant messaging (IM) program has some of the same security and privacy risks as e-mail, but there are a few dangers that are unique to IM. The original 2009 version of this guide was written for desktop IM clients like AIM and MSN Messenger. The same principles apply to modern apps — WhatsApp, Telegram, Signal, Discord, Slack, and iMessage.
1. Never open files or links from strangers
Never open pictures, download files, or click links in messages from people you don’t know. If they come from someone you do know, confirm with the sender that the message (and its attachments) is trustworthy. If it’s not, close the conversation.
2. Be careful when you create a username
Each messaging app asks you to pick a handle. Your username should not provide or allude to personal information. For example, use a nickname such as FootballFan instead of BaltimoreJenny.
3. Create a barrier against unwanted messages
Do not list your screen name or phone number in public areas (such as large Internet directories or online community profiles) or give them to strangers.
Some messaging services link your username to your phone number when you register. The easy availability of your phone number can result in an increased number of spam and phishing attacks.
4. Never provide sensitive personal information
Never provide sensitive personal information, such as your credit card numbers or passwords, in an IM conversation.
5. Block unwanted messages
Most messaging apps allow you to build a contact list (also known as a “buddy list” or “friends list”), which is similar to the address book in your e-mail program.
You can choose to allow anyone to add you to their contact list or you can restrict your contact list to people you want to hear from. You can also choose to block all incoming messages from everyone except the people on your contact list.
6. Take precautions when meeting strangers
If you decide to meet a stranger that you know only from IM communication, take appropriate safety precautions. For example, do not meet that person alone (take a friend or parent with you), and always meet and stay in a public place, such as a cafe.
7. Don’t send personal messages at work
Your employer might have a right to view those messages.
8. Don’t log on automatically on public computers
If you use a public computer, do not log on automatically. If you do, people who use that computer after you can see and use your screen name to log on.
9. Monitor and limit children’s use of IM
On Windows, use Microsoft Family Safety (Settings → Accounts → Family). On macOS, use Screen Time parental controls. On mobile, use the built-in parental controls in iOS and Android, or a dedicated app.
10. Be careful with your availability status
When you’re not available to receive messages, be careful how you display this information to other users. For example, you might not want everyone on your contact list to know that you’re “Out to Lunch.”