Called “The front page of the internet,” Reddit is one of the most popular social media platforms in the world. With over 100 million daily active users, it’s become the go-to place for discovering the latest news, building communities with shared interests, and getting answers to pressing questions on anything from pet ownership to software. However, thanks to the anonymity of Reddit accounts, it’s become a popular spot for cybercriminals to catch unsuspecting users in phishing scams. Let’s find out whether Reddit is safe to use and how you can stay safe while browsing the numerous subreddits and discussion threads.
Contents:
Is Reddit legit?
Reddit is a legitimate social media and news platform. It was launched in 2005 and, in the two decades since, has become one of the most popular social media platforms and one of the most visited websites in the world. Users take part in various discussion boards known as subreddits, creating threads to talk about news, discuss personal interests, or look for advice and support.
The platform is largely anonymous and built based on the principles of net neutrality. However, users in the UK must comply with the age verification requirements. To maintain user safety, Reddit has implemented various security protections, like spam filters, subreddit moderation, and multi-factor authentication.
Reddit is largely supported by volunteer moderators who oversee conversations and ensure users adhere to the terms of service. Many subreddits use automated bots to aid in detecting suspicious or malicious user behavior and block spam accounts and posts.
Celebrities, scientists, tech representatives, and other known personalities have taken part in Reddit’s “Ask me anything” (AMA) events — public question-and-answer sessions. Reddit is also traded on the stock market, meaning that the company behind the platform must conform to financial and legal regulations.
Nevertheless, some parts of the Reddit userbase have engaged in concerning or illegal behavior, leading to certain subreddits getting shut down and user accounts being deactivated. To help users identify and report scams, the r/Phishing and r/Scams subreddits were created.
The main privacy and security risks on Reddit
Reddit allows users to access the website and app even without an account, excluding adult content and private discussion boards. Unlike social media platforms like Facebook or LinkedIn, where the usernames typically reveal the person’s real name, Reddit supports anonymity and custom usernames. However, despite features that help users hide their personal information, the platform is still prone to some security risks.
Direct messages. Scammers send message requests containing phishing links to users. A common scam is a fraudster messaging a user saying their account was accidentally reported and suggesting appealing to a specific website. The website is then used to steal the target’s login credentials.
Crypto scams. In crypto communities, scammers create threads and send users direct links, claiming they lead to a new token drop. The link is then used to steal the user’s crypto wallet information.
Data aggregation. If a user doesn’t have their post and comment history hidden, criminals can analyze it to gain information about them. With enough data gathered, they can trace the user to their other online accounts, effectively doxing them.
Credential stuffing attacks. If someone has reused their Reddit password on a different platform and that platform has been compromised, cybercriminals can take this data and use it in credential stuffing attacks, testing different email address and password combinations until they can log in.
False apps. Hackers can develop copycat apps that imitate Reddit but are instead used to steal user credentials or infect the device with malware. If the user installs a copycat app, launches it and logs in using their credentials, cybercriminals can gain access to their data.
Pro tip: Always download apps from the official source. To find the real app for your device, open the Reddit website on your mobile browser and tap the “Open app” button. It’ll redirect you to your app store.
Is Reddit a reliable source for information?
Asking Google a question and adding “Reddit” at the end of the query has become a meme in recent years, and for good reason. As a collection of various discussion boards, Reddit often becomes the go-to place to ask specific questions, like how to fix a broken keyboard, fix a complicated code, or simply do household repairs.
However, despite the broad scope of information and shared experiences available on Reddit, not all of it is reliable. Users don’t always support their answers by providing reliable sources, so it can be a guessing game of figuring out whether the information is true or not. More malicious users can deliberately share false information to cause harm or worsen the asker’s situation.
Another issue is sharing of online links. Reddit is a decentralized platform, and moderation varies from subreddit to subreddit. Subreddit moderators can set rules, like banning certain external websites from being interlinked in the users’ posts. Although this is often done to block unreliable or suspicious websites, it can also create echo chambers where only limited information is accepted and can’t always be verified or criticized.
Even if you find a seemingly reliable source, it can be outdated. The users can upvote or downvote a post, and the posts with more upvotes can be seen as more reliable. However, over time, they go unedited, and the information becomes obsolete — for instance, due to app updates or defunct tools. Old subreddit topics can also be archived or deleted, so you might not be able to double-check the necessary information.
You can trust Reddit for some answers, but always check the validity of the information you find on other sites. Be mindful of asking for medical or legal advice — even in dedicated subreddits for specialized topics, many participants will emphasize that they’re not professionals or that their reply doesn’t count as official counseling.
Is Reddit safe compared to apps like WhatsApp?
Although Reddit is primarily a platform for public conversations, some users choose to communicate more privately via the Reddit Chat. It’s a built-in feature that lets the users manage direct and group chats with other users. Subreddit moderators also handle their modmail in the Reddit Chat. Apps like WhatsApp offer a chat as the primary communication feature. Both Reddit and WhatsApp let users talk to each other directly and maintain group discussions. However, from a technical perspective, the two function differently.
Determining how safe WhatsApp is compared to Reddit depends on two angles: anonymity and encryption. All Reddit chats are held under the usernames, whereas WhatsApp users need to share their phone number. This can lead some users to choosing Reddit as their preferred chat app — it’s more anonymous and doesn’t require them to provide information that could be directly tracked to their identities.
The Reddit platform itself is protected by SSL encryption. However, unlike WhatsApp, Reddit doesn’t secure users’ messages with end-to-end encryption. This means that the messages can be intercepted and read if a Reddit user account is breached. WhatsApp is safer in this case — all messages are protected with end-to-end encryption in transit.
Reddit user accounts are more susceptible to social engineering attacks than WhatsApp’s. The login process requires the usual username-and-password combination. So if the password is breached, cybercriminals can easily log in and take over the account. WhatsApp’s login is dependent on the phone number — without having the device itself or committing SIM swapping scams, criminals have few chances of breaking in. So if you want to stay anonymous while discussing niche topics online, Reddit might be better for you. However, if you want to protect the actual content of your conversations, you should consider WhatsApp.
Level up your online security
Store and manage your digital valuables safely
How to stay safe on Reddit
New subreddits, discussion threads, and accounts appear on Reddit every minute, and you might never know when you run into malicious users. To keep your Reddit account protected from scammers, you can follow a few simple steps.
1. Set up two-factor authentication (2FA)
Two-factor authentication is an effective way to add extra security to your account. It requires you to enter an additional code during the login process. Without this code, cybercriminals can’t breach your account even if they’ve gained your username and password.
To set up 2FA on Reddit, you need to:
Open the Reddit website.
Click your icon at the top-right corner and select “Settings.”
Under “Account authorization,” toggle on “Two-factor authentication.”
Enter your Reddit password first and click “Continue.”
You can either scan the QR code or enter the token to your authenticator app.
If you’re using NordPass Authenticator on your phone, open the item with your Reddit credentials saved and tap “Add two-factor code.” Then, scan the QR code or enter the token.
Enter the six-digit code displayed in your authentication app to the field on the Reddit page.
Click “Complete setup.”
Keep in mind that you can only set up two-factor authentication on the web browser. However, once set up, you can use it to log in to the Reddit website or app on other devices.
2. Switch to a passkey
Instead of using a password to log in to your account, you can set up passwordless authentication. Passkey uses a combination of public and private keys, as well as your biometrics, to secure your login session.
To set up a passkey on Reddit, you need to:
Open the Reddit website.
Click your icon at the top-right corner and select “Settings.”
Under general settings, select “Create a passkey.”
Enter your password first and click “Continue.”
Your passkey manager will prompt you to add a new item. If you’re using NordPass for passkeys, the browser extension will pop up to let you create it. Select “Create” and enter your NordPass Master Password to proceed.
That’s it! You’ve added a passkey to your account. You can now use it to log in.
Keep in mind that you can only set up a passkey using the web browser. However, NordPass will keep your passkey synchronized, letting you log in on other devices too.
3. Toggle off “Show up in Google Search results”
To adjust search engine settings, you need to:
Open the Reddit app.
Tap “You” in the bottom navigation bar.
Tap the hamburger menu at the top-right corner.
Select “Settings.”
Under “General,” select “Account settings.”
Under “Privacy,” toggle off “Show up in search results.”
4. Turn off personalized location and data-tracking indicators
According to Reddit’s privacy policy, some of the information about users can be shared with third parties for specific operational, legal, and advertising reasons. To limit how much of your information can be shared externally, you can toggle off personalization and data tracking preferences.
Open the Reddit app.
Tap “You” in the bottom navigation bar.
Tap the hamburger menu at the top-right corner.
Select “Settings.”
Under “General,” select “Account settings.”
Toggle off “Personalize ads on Reddit based on your activity on Reddit.”
Toggle off “Personalize ads on Reddit based on information and activity from our partners.”
Toggle off “Allow Reddit to use optional cookies.”
Optionally, you can toggle off all sensitive advertising categories.
5. Adjust not safe for work (NSFW) content settings
Some subreddits allow users to share content that’s unsuitable for work, like nudity. Criminals can take advantage of these spaces to share links to illicit services or phishing websites. You can limit the risk of seeing potentially dangerous content by turning off the visibility of NSFW posts.
Open the Reddit app.
Tap “You” in the bottom navigation bar.
Tap the hamburger menu at the top-right corner.
Select “Settings.”
Under “General,” select “Account settings.”
Under “Privacy,” select “Curate your profile.”
Toggle off “NSFW.”
6. Adjust account visibility and interaction permissions
To protect the privacy of your Reddit data, you can toggle settings that limit who can interact with your account or see what you post.
Open the Reddit app.
Tap “You” in the bottom navigation bar.
Tap the hamburger menu at the top-right corner.
Select “Settings.”
Under “General,” select “Account settings.”
Toggle off “Allow people to follow you.”
Go to the “Chat permissions” section.
Tap “Allow chat requests from” and select “Nobody.”
Return to account settings and go to the “Curate your profile” section.
Tap “Content and activity” and select “Hide all.”
Toggle off “Followers.”
How NordPass can help protect your Reddit account
Reddit is a great place to connect with like-minded people and gather useful resources for your projects. Losing access to that account might mean losing track of years upon years of shared knowledge. But with a password manager like NordPass, you can easily secure your Reddit user account details and respond to data breach attempts quickly.
NordPass lets you generate, store, and manage login credentials to all your accounts. If you keep all your passwords unique, you lower the risk of successful credential stuffing attacks targeting you. Whenever you need to log in to your account, NordPass will autofill the details for you, including your two-factor code. And if you decide to swap to a passkey, the app will locate it in the vault and let you easily authenticate your login attempt.
You can use the Data Breach Scanner to monitor the dark web for your sensitive data and get alerted if it finds a match, letting you quickly respond to data breaches. You can also find any weak links inside your vault with Password Health. If you have any questions about the product, you can drop by the NordPass subreddit, and we’ll be happy to help.