Community Guidelines

TikTok · agreement dated September 24, 2026 · Official agreement

Read the agreement

7 of 176 cards in Security & Safeguards

Security & Safeguards · Restriction or exception

Summary: sharing harmful personal information and compromising TikTok systems not allowed

The summary says TikTok does not allow sharing personal information that could lead to harm, such as identity theft, stalking or fraud, and does not allow attempts to hack, reverse-engineer or otherwise compromise TikTok’s systems. The first rule is limited by whether the information could lead to harm; the summary does not say that all personal information is prohibited.

Details not recorded for this card

Supporting quotations

We don’t allow sharing personal information that could lead to harm, such as identity theft, stalking, or fraud.
We don’t allow attempts to hack, reverse-engineer, or otherwise compromise TikTok’s systems.

Qualifications & exceptions

  • Personal information is covered when it could lead to harm.

Security & Safeguards · Company commitment

Protect Privacy principle

TikTok says it is committed to protecting the privacy of its community and anyone shown or discussed on the platform, and strives to ensure content does not expose anyone’s personal information or invade their intimate privacy. The wording is that it strives to; it is a goal rather than a guarantee.

Details not recorded for this card

Supporting quotations

We are committed to protecting the privacy of our community and anyone shown or discussed on the platform.
We strive to ensure that content doesn't expose anyone’s personal information or invade their intimate privacy.

Qualifications & exceptions

  • Stated as an effort (strive), covering people shown or discussed as well as users.

Security & Safeguards · Restriction or exception

Personal Information: content that could lead to harm not allowed, even if posted by the person or shared with consent

TikTok does not allow content with personal information that could lead to stalking, identity theft, fraud or other harm. This includes content that someone has posted themselves or that they consented to being shared by others, so the owner’s own posting or consent does not by itself make such content allowed. TikTok may also remove moderate risk personal information shared without consent if it puts someone at risk of psychological harm, and generally requires additional context to remove these types. A reporting link is offered for users who think their privacy has been violated.

Details not recorded for this card

Supporting quotations

we don’t allow content with personal information that could lead to stalking, identity theft, fraud, or other harm
This includes content that someone has posted themselves or that they consented to being shared by others.
We may also remove moderate risk personal information shared without consent if it puts someone at risk of psychological harm.
We generally require additional context to remove these types of personal information.
If you think your privacy has been violated, you can report it

Qualifications & exceptions

  • Moderate risk information is removed only when shared without consent and it puts someone at risk of psychological harm, and generally with additional context.

Not stated here

  • The linked pages named in this passage were not supplied, so their contents cannot be described here.

Security & Safeguards · Context

Definitions: high risk and moderate risk personal information

High risk personal information is information with a heightened potential to cause physical, financial or psychological harm to the individual, including home address, account login information, sensitive payment information and identity numbers. Moderate risk personal information is information that is not inherently risky but may still cause harm, like emotional distress, reputational damage or unwanted contact, especially when combined with other data; examples include contact details or date of birth, medical information, image or audio likeness, and private communications on sensitive subjects disclosed by individuals who were not part of the exchange.

Details not recorded for this card

Supporting quotations

Information that is characterized by a heightened potential to cause physical, financial, or psychological harm to the individual. It includes:
Home Address
Account Login Information
Sensitive Payment Information
Identity Numbers
Information that isn't inherently risky, but may still cause harm—like emotional distress, reputational damage, or unwanted contact—especially when combined with other data. Examples include:
Contact details or date of birth
Medical information
Image/audio likeness
Private communications on sensitive subjects, disclosed by individuals who were not part of the exchange

Qualifications & exceptions

  • Both lists are introduced by includes or examples include, so they are not exhaustive.

Security & Safeguards · Restriction or exception

Personal Information: sharing high risk information, and likely-harmful moderate risk information, not allowed

Not allowed: sharing high risk personal information, and sharing moderate risk personal information when it is likely to cause psychological harm or emotional distress for an individual; TikTok generally requires additional context to remove the moderate risk information.

Details not recorded for this card

Supporting quotations

Sharing high risk personal information
Sharing moderate risk personal information when it's likely to cause psychological harm or emotional distress for an individual. We generally require additional context to remove this information

Qualifications & exceptions

  • Moderate risk information is covered when likely to cause psychological harm or emotional distress.

Security & Safeguards · Company practice

Platform Security: attempts to break in, steal information or abuse systems stopped; verification may be required

TikTok says it works to keep the platform safe, secure and running smoothly, including stopping attempts to break into the platform, steal information or abuse its systems. It advises against clicking suspicious links or sharing private account information. If suspicious activity associated with an account is detected, TikTok may require the user to complete verification steps, such as SMS or email confirmation, CAPTCHA, or a login via a verified mobile device, to confirm that they own the account.

Details not recorded for this card

Supporting quotations

That includes stopping any attempts to break into the platform, steal information, or abuse our systems.
We advise against clicking suspicious links or sharing your private account information.
If suspicious activity associated with an account is detected, we may require a user to complete some verification steps—such as SMS or email confirmation, CAPTCHA, or a login via a verified mobile device—to confirm that they own the account.

Qualifications & exceptions

  • Verification steps may be required only if suspicious activity associated with an account is detected.

Not stated here

  • The linked pages named in this passage were not supplied, so their contents cannot be described here.

Security & Safeguards · Restriction or exception

Platform Security: not allowed behavior

Not allowed: giving someone else your login information or letting them break TikTok’s rules on your account; using unauthorized ways to access TikTok or creating fake versions of the platform; sharing files or messages that carry malware or other harmful software, such as viruses or worms; trying to steal personal information, hack accounts or access data using tricks like phishing, smishing or automated tools; and trying to reverse-engineer TikTok’s code, systems or algorithms, or create your own versions based on them.

Details not recorded for this card

Supporting quotations

Giving someone else your login information or letting them break TikTok’s rules on your account
Using unauthorized ways to access TikTok or creating fake versions of the platform
Sharing files or messages that carry malware or other harmful software, such as viruses or worms
Trying to steal personal information, hack accounts, or access data using tricks like phishing, smishing, or automated tools
Trying to reverse-engineer TikTok’s code, systems, or algorithms—or create your own versions based on them