Protect your dating and social accounts with a unique password for each one, multi-factor authentication where offered, and recovery details entered through the provider's own site or app. Review privacy and contact controls before you start chatting. Trust is built through consistent, respectful behaviour over time, not by exchanging passwords, and no one needs your login to prove they are genuine.
Find public social profile clues with our TraceSeek app.
Start with the settings you control
Before you engage with anyone, spend a few minutes on your own accounts. Review privacy, contact, location, reporting and verification controls before choosing a dating app, and revisit them after any update. Limit identifying details, and consider what reused photos or links to your social accounts reveal to strangers. You may decline contact or a meeting that makes you uncomfortable. Treat these reviews as practical housekeeping, not a test of anyone else. [eSafety Commissioner: Online dating]
- Review verification and privacy controls where the app offers them
- Unlink social accounts you do not want associated with your dating profile
- Check who can see your location and distance settings
- Confirm your recovery email and phone number inside the app
Build passwords that do not overlap
Make the password for each dating and social account unique so that one compromised login does not hand over your other accounts. A password manager can generate and store long random strings for you. If you suspect a password has leaked, change it. Recovery settings matter too: confirm the recovery email and phone on file are current, because an outdated recovery route can lock you out when you need it most.
- Give every dating and social account its own password
- Consider a password manager instead of a notes app
- Verify recovery email and phone after any change
Add multi-factor authentication
Multi-factor authentication adds account protection beyond a password, so a stolen or guessed password alone is not enough to get in. Turn it on for every dating and social account that offers it. Save any backup codes somewhere offline. If a login prompt appears when you are not signing in, do not approve it; instead change your password and review your account's active sessions. These are practical safety habits, not proof that anything has gone wrong yet. [FTC: How To Recognize and Avoid Phishing Scams]
- Enable MFA on each dating and social account that offers it
- Save backup codes offline
- Review active sessions if you see unexpected login prompts
Spot requests that ask for your login
Phishing messages try to obtain sensitive account or financial information, and dating conversations are a natural place for that pressure to appear. Anyone asking for your password, a one-time code or a screenshot of your inbox is asking for account access, not intimacy. If a message claims your account is at risk, do not use its links. Contact the provider through its independently known website or phone number instead. [FTC: How To Recognize and Avoid Phishing Scams]
A hypothetical worked example
This is an editorial illustration, not a psychological test. Suppose a hypothetical match, after a week of friendly chat, says they want to prove trust by swapping account passwords so each can check the other's messages. A reasonable move is to decline warmly and explain that you keep logins private as a rule. Offer a different form of reassurance, such as a video call or meeting in a public place. Observe how the request is received without treating acceptance of your boundary as proof of honesty. Repeated pressure after a clear no is your cue to stop engaging.
- Name the boundary plainly and without apology
- Offer an alternative that does not involve account access
- Notice whether the boundary is respected without treating it as proof of character
Decide when to stop or act
Use a simple decision table rather than a gut feeling in the moment. It separates what you observe, the limit you set and the action you take. If someone asks for a password, a login code or remote access to your device, stop the conversation and secure your accounts first. If you have already shared something, change that password, enable multi-factor authentication and review sessions. If nothing has been shared but the request felt off, you can simply disengage. These are editorial suggestions, not authoritative tests of another person. [FTC: How To Recognize and Avoid Phishing Scams]
| Observation | Limit | Action |
|---|---|---|
| Asked to share a password | Logins stay private | Decline and continue only if the boundary is respected |
| Shared a one-time code | Account access is at risk | Change the password, enable MFA and review sessions |
| Suspicious account-security message | Do not use its links | Contact the provider via its own site or number |
| Persistent pressure after a no | Repeated pressure is not acceptable | Stop the conversation and use the platform's reporting controls where available |
A couple more questions
Is it normal for a date to ask for my password?
No one needs your login to prove they are genuine. A password is account access, not a gesture of trust. You can decline and offer a different way to build confidence, such as a video call or a public meeting.
What should I do if I already shared a login code?
Change that account's password, turn on multi-factor authentication, and review active sessions and recovery details. Do not reuse the old password anywhere.
Does multi-factor authentication really help on dating apps?
It adds a layer beyond the password, so a guessed or leaked password alone is not enough to sign in. Enable it wherever the app offers it, and keep backup codes offline.
How do I check a security message is genuine?
Do not use links in the message. Open the provider's website or app yourself, or call a number you already know, and check your account there.
Sources & editorial notes
Official references checked on October 20, 2026. Checklists, comparison tables and example wording are DateClues editorial tools, not official tests or validated risk scores.
General information. No guide or tool can certify a person’s identity, intentions or safety. Read our editorial standards.