TL;DR
Social media creates a detailed profile of your resources, location, routine, and vulnerabilities — most of it posted voluntarily. The basic audit: review what you've posted about supplies and preparedness, tighten privacy settings, turn off location embedding in photos, stop posting content that builds a target profile. Then decide who you actually trust enough to share with.
What Social Media Reveals
A motivated person reviewing your public social media can reconstruct:
- Your home address (from tagged locations, photo backgrounds, posts about your neighborhood)
- Your daily routine (commute times, gym schedule, when kids are at school)
- What you own (car, equipment, visible home features)
- Your preparedness level (food storage photos, gear posts, "prepper" identity content)
- When you're away from home (vacation posts, travel check-ins)
- Your family structure (who's at home, ages of children, pets)
- Your circle of trust (who you interact with, prepper group memberships)
None of this is collected through hacking. It's volunteered through normal posting behavior.
The OPSEC Audit
Once a year, audit your public social media presence:
What to look for and remove:
- Photos showing identifiable home exterior with address visible or inferrable
- Posts mentioning food storage quantities, generator capacity, fuel reserves
- Photos of large supply deliveries or newly purchased preparedness gear with identifiable location
- Location tags at your home address
- "Away from home" posts (vacations, travel) while home is unoccupied
- Detailed descriptions of your security setup, safe room, or defense capability
Platform Privacy Settings
Facebook:
- Profile visibility: Friends only (not Public)
- Future posts default: Friends only
- Review post by timeline: On (approve before visible)
- Location history: Disabled
- Tag review: On
- Who can find you by phone/email: Nobody or Friends
Instagram:
- Account: Private (or intentionally separate anonymous account for preparedness content)
- Story location: Off
- Location in posts: Don't tag
- Activity status: Off
Google/Maps:
- Location history: Off or limited
- Timeline: Off
General:
- Disable location services for camera apps
- Don't use check-ins at home
- Review app permissions — many apps share location data
Separating Prepper Identity from Real Identity
Many active preppers want to engage with online prepper communities — forums, YouTube, Reddit, Facebook groups. This is legitimate and valuable for learning.
The operational risk: content posted under a username that's linked to your real identity creates an information chain. If your "anonymous" prepper account uses the same email as your Facebook, or your prepper YouTube channel tags your real location, the anonymization is ineffective.
If you participate in online preparedness communities:
- Use a separate email address not linked to your real identity
- Use a separate username not used elsewhere
- Don't tag your city or region
- Don't post photos with identifiable home features
The value of community engagement is real. The risk is a detailed preparedness profile publicly linked to your name and address.
The Vacation Problem
Posting photos during a vacation while your house sits empty is a burglary risk, not just an abstract OPSEC concern. Residential burglary during vacation periods is common and documented.
Practice:
- Post vacation photos after returning, not during
- If live posting is important, use privacy settings limiting posts to close friends who already know you're traveling
- Have a neighbor or housesitter who can park in the driveway and collect mail
- Use smart home tools (randomized lights, etc.) to simulate occupancy
Applying This to Children
Children's social media behavior is harder to control but important to address.
Discuss with teenagers: their public posts about your home, your supplies, and your family's preparedness create the same profile risks as your own posts. The conversation is the same one about OPSEC fundamentals — private about what we have, not advertising to people we don't know.
Review the privacy settings on children's accounts. Public accounts for teenagers are the default; private accounts or Friends-only are the appropriate setting.
Sources
Frequently Asked Questions
Do I need to delete my social media accounts?
No. That's an extreme response to a manageable problem. The goal is controlling what information you share publicly vs. what you share with trusted contacts vs. what you don't share at all. Most platforms have privacy controls adequate to limit your most sensitive information to a small trusted audience. Audit, tighten, and be intentional going forward.
What's the danger of location sharing?
Location sharing in photos (EXIF data embedded in smartphone images) can reveal your home location, your routine, your bug-out location, and the location of your supplies — all automatically, without you realizing it. Most social platforms strip EXIF data when images are uploaded, but some don't, and the timestamp plus your identified location still reveals patterns. Turn off location services for your camera app if you post publicly.
Is my private Facebook group actually private?
Private Facebook groups limit who can see posts to approved members, but the security is only as good as your member vetting. Anyone in a private group can screenshot and share content. Any member account that's compromised exposes all content. 'Private' means limited to approved members, not actually secure. For sensitive preparedness community communication, end-to-end encrypted platforms (Signal groups) are more appropriate.