Setting up a chat account takes about a minute. Getting the privacy settings right takes a good deal longer, and most people never quite finish the job. That is not laziness — the important switches sit on different screens, and none of them demand your attention.

What follows is the checklist worth working through once you join Onyx Chat. It covers the four settings that do the heavy lifting: password, two-factor authentication, blocked contacts and profile visibility. Set aside fifteen minutes. You will not need to think about most of it again.

Your password is still the front door

Every other setting is a lock on a door held shut by your password. If that password is short, guessable, or already in use somewhere else, the rest of this checklist buys you very little.

Three habits cover most of the risk. Use a password that exists nowhere else — not your email password, not your bank password. Go longer rather than stranger: four or five unrelated words are easier to remember and harder to crack than eight jumbled characters. And let a password manager hold the result, so you have no excuse to reuse anything.

Skip anything personal. A childhood street, a pet's name, a date of birth — these are the first things an attacker tries. If your Onyx Chat password is also used elsewhere, change it here first, then change it on the other account.

Turn on two-factor authentication

A password can be guessed, phished or bought from a leaked list. A second factor cannot be borrowed quite so easily, which is why two-factor authentication is the single most useful switch in your settings.

Which second factor to choose

An authenticator app is stronger than a code sent by text message. Text codes can be intercepted, or arrive on a phone number an attacker has quietly taken over. If Onyx Chat offers a security key, that is stronger still.

Whichever you pick, download the backup codes and store them offline — a printed sheet in a drawer, or inside your password manager. Locking yourself out is a real risk when the only second factor is a phone you have left on a train.

If a stranger asks for the code that has just arrived on your phone, the answer is always no. Support teams do not ask for it, and neither does a friend whose account has been taken over.

Decide who can see you

Visibility settings are the ones people most often leave on the default. Two minutes is enough to fix that.

Start with your profile photo and display name. Both are usually visible to anyone who searches for you, whether or not you have ever spoken. If you use Onyx Chat for public conversations, consider a display name that is not your full legal name — a first name and an initial is plenty for people who already know you. Look at the photo too. A picture of your front door, your car registration or a school uniform tells a stranger more than you intended.

Then check presence. Most chat platforms let you control who sees when you were last online and whether you are typing. Choosing contacts only stops you being watched by someone you have never met. Decide who can message you directly as well: contacts only is the safer default, with stranger requests sent to a folder you can ignore.

Finally, read your own bio once. Job title, employer and home town are each harmless alone and revealing together. If you would not say it to a stranger at a bus stop, it does not need to be on your profile.

Block, mute or restrict: know the difference

These three options sound similar and behave quite differently. Picking the wrong one is how people end up still receiving messages from someone they thought they had dealt with.

  • Mute silences notifications. The person can still message you and still sees your profile.
  • Restrict limits what someone can do, often hiding your online status or sending their messages to a requests folder. They may not notice anything has changed.
  • Block is the full stop: they cannot message or call you, or find your profile in a search.

Blocking is the right choice when contact itself is the problem. It is not a shield, though. Someone determined can make a new account and find you again, so pair a block with the visibility settings above: photo limited to contacts, presence hidden, messages from contacts only.

Do also glance through your blocked list now and then. Old blocks pile up, and a former colleague you parted with on reasonable terms does not need to stay there forever.

Check where you are signed in

Every chat account keeps a list of devices currently logged in, usually under security or devices in settings. Open it. If you see a phone you traded in, a work laptop, or a tablet you signed into once in a hotel, log it out. Change your password if anything looks unfamiliar, since that ends other sessions too.

Shared computers deserve particular care: sign out rather than closing the tab. On your own phone, set a screen lock and keep the app updated, because updates carry security fixes.

The five-minute monthly routine

None of this needs doing daily. A short routine once a month keeps it honest:

  1. Open the active sessions list and remove anything you do not recognise.
  2. Confirm two-factor authentication is still on, and your backup codes are where you left them.
  3. Skim your blocked and restricted lists.
  4. Check who can see your photo, presence and messages.
  5. Change any password you have reused since the last check.

Repeat it after a new phone, a long trip or a falling-out, and you will rarely be caught out. Privacy on a chat platform is not one setting but a handful of small decisions made in the right order. Make them once, and Onyx Chat becomes a much easier place to talk.

Photo: Robert So / Pexels