Secure Your Accounts Immediately

If someone has gained access to your private images, there is a risk your accounts are compromised. Take these steps to lock them out.

1. Change Your Passwords

Immediately change the passwords for:

  • Your primary email account (Gmail, Outlook, etc.). This is the most crucial account to secure.
  • Your social media accounts (Instagram, Facebook, X, Snapchat, WhatsApp).
  • Cloud storage (Google Drive, iCloud, Dropbox, OneDrive).

Tip: Use a completely new, strong password. Do not use combinations of your name or birth details. Consider using a password manager like Bitwarden or 1Password.

2. Check Active Sessions & Log Out Devices

Someone might still be logged into your account on another device.

  • Instagram: Settings > Accounts Center > Password and Security > Where you're logged in. Log out of unrecognized devices.
  • Facebook: Settings > Accounts Center > Password and Security > Where you're logged in.
  • WhatsApp: Open WhatsApp > Settings (or 3 dots) > Linked Devices. Remove any unrecognized browsers or computers.
  • Google/Gmail: Go to myaccount.google.com > Security > Your Devices > Manage devices. Sign out of anything suspicious.
  • Apple/iCloud: Go to appleid.apple.com > Devices. Remove devices you do not own.
3. Setup Two-Factor Authentication (2FA)

2FA requires anyone trying to log in (even if they know the password) to enter a code sent to your phone or an authenticator app. You MUST turn this on for all accounts.

  • Use an Authenticator App (like Google Authenticator, Microsoft Authenticator, or Authy) instead of SMS (text messages). SMS codes can be intercepted.
  • Go to the Security or Privacy settings of each app (Instagram, Gmail, etc.) to set this up.
  • Make sure to save the Backup Codes provided when you set up 2FA in a safe place.
4. Review App Permissions & Third-Party Apps

Sometimes attackers gain access through rogue third-party applications linked to your account.

  • Google: Review third-party apps with account access in your Security settings and remove anything you don't recognize.
  • Facebook/Instagram/X: Go to settings and search for "Apps and Websites". Disconnect any apps you don't use or remember authorizing.
5. Device & Cloud Advisory

A significant number of image leaks happen due to poor device handling and cloud syncing.

  • Avoid Public Clouds: Avoid storing highly private images on cloud services (iCloud, Google Photos, etc.) where a single compromised password exposes everything. Disable automatic camera backup for sensitive folders.
  • Device Servicing & Repairs: Before handing over your phone or laptop for repairs or maintenance, permanently delete all private media. Better yet, back it up to a secure offline hard drive and factory reset your phone before the repair.
  • Limiting Trust: The majority of NCII leaks are perpetrated by former partners or trusted individuals. Choose not to share, but if you do, use platforms with robust self-destructing and screenshot-blocking features.