A TikTok account with an audience is worth money, so attackers target creators with fake brand-deal emails, bogus "verification" offers and reused passwords from old breaches. Once they are in, they change the email and phone number, delete videos or post scams to your followers. Smaller accounts are targeted too, because a hijacked account with real history looks more trustworthy to spam bots.

Because most people sign in to TikTok on a phone, choose a password that is long but comfortable to type on a touch keyboard. A passphrase of four or five random words separated by a simple character is easy to enter and much stronger than a short string full of symbols. Never use a password you have used on any other app: TikTok accounts are regularly taken over with credentials leaked from unrelated services.

In TikTok's Security settings, turn on 2-step verification (an authenticator app is safer than SMS, which can be hijacked through a SIM swap) and review the list of logged-in devices. If you sign in with Google, Apple or another account instead of a password, that account's password and two-factor settings now protect your TikTok too.

Try the generator

14

Your settings are remembered on this device only. Privacy Policy.

Example password patterns

1

Two random words joined with a hyphen, plus a 2-digit number and a symbol — e.g. Word-Word##!

2

A short phrase you'll remember (4 words), separators between each word, no spaces — e.g. Word_Word_Word_Word

3

Acronym from a movie quote or song line + the year you first heard it + a symbol — e.g. FirstLettersYYYY!

4

Three uncommon words concatenated, with a digit and a symbol — e.g. WordWordWord#9

5

Mix of casing and one substitution per word (don't overdo it — substitutions don't add much entropy) — e.g. wOrd-wOrd-99!

6

Let our generator pick the whole string — the most secure option. Click Generate above.

Frequently Asked Questions

What should I do first if my TikTok account was hacked?
Try to reset your password from the TikTok login screen using your phone number or email. If the attacker has changed both, use the "Report a problem" option in the app to request account recovery. Once you are back in, set a new unique password, turn on 2-step verification, remove unknown devices, and change the password on any other account that shared the old one.
Is it safer to log in to TikTok with Google or Apple?
It can be, as long as that Google or Apple account is well protected. Signing in with it means there is no separate TikTok password to reuse or leak, and those providers offer strong two-factor options and passkeys. The trade-off is that anyone who takes over your Google or Apple account also gets your TikTok, so give that main account a long unique password and two-factor authentication.

Related Tools

Continue your security workflow with these tools