Here are some basic tips and resources to help keep you and your channel safe on YouTube.
Avoid suspicious requests
Malware and phishing are two common types of suspicious requests. Malware is a type of software that can gain access to your account, spy on your activity, delete your files, and make changes to your online access.
Phishing is when a hacker disguises themselves as someone trustworthy to take your personal information, such as password. Hackers may use emails, text messages, or web pages to pretend to be institutions, family members, clients, or colleagues.
Keep in mind: YouTube will never ask for your password, email address, or other account information. Legitimate emails from YouTube will only come from @youtube.com or @google.com email addresses.
What to do:
Scan for malware. We recommend scanning downloads for malware by turning on Enhanced Safe Browsing, which is especially important for encrypted files that can bypass antivirus scans.
Protect against phishing. We recommend turning on 2-Step Verification and choosing a passkey as the second verification method to get the strongest protection against phishing.
Don’t reply to suspicious messages. This can include suspicious emails, texts, instant messages, websites, or phone calls that offer, for example:
- Free crypto coins
- Marketing assistance that requires channel access
- Passwords to open encrypted files
Don’t open untrusted links or files. This can include links or files from untrusted sources in emails, texts, instant messages, websites, pop-ups, or on YouTube that offer, for example:
- Free thumbnail templates
- Premium editing programs
- Unknown software
Before replying to a brand deal or sponsorship email, it's best to verify legitimacy by calling the company on the phone or reaching out to the person you usually work with.
Report spam or phishing
What to do:
If you find videos on YouTube that you think might be spam or phishing,
report them to the YouTube team.
You can test your phishing knowledge with Google’s
phishing quiz.
Take action to keep your channel safe
What to do:
Secure your YouTube Channel and Google Account. To secure your YouTube Channel, take the actions listed in Secure your YouTube channel. To secure the Google Account linked to your YouTube channel, take the actions listed in this Google Account checklist.
Check and update channel permissions. If you’re a YouTube Creator, you can use channel permissions to give someone else access to your YouTube channel without giving them access to your Google Account. There are different types of roles you can assign someone else:
- Manager: Can add or remove others and edit channel details.
- Editor: Can edit all channel details.
- Editor (limited): Same permissions as editor, but can’t view revenue info.
- Viewer: Can view, but not edit, all channel details.
- Viewer (limited): Can view, but not edit, all channel details except revenue info.
Before you give someone access to your YouTube channel, share this article with them so they’re aware of safety best practices on YouTube. If someone leaves your team or if you don't recognize the people managing your channel, be sure to
remove their access.
If you have a Brand Account, you can invite someone to manage both your Google Account and your YouTube channel. Owner and Manager roles can upload videos and make changes, so make sure you’re comfortable with that access before giving it. Learn how to check if you have a Brand Account and manage Brand Account permissions.
Delete connected apps you don’t need. To protect your Google Account and YouTube channel, avoid installing unknown apps or apps from unknown sources. Delete any apps you don’t need from your account settings.
Don't share your sign-in info. Never give out your passwords. To grant access to your channel, use channel permissions or Brand Account permissions (if you have a Brand Account) instead of sharing passwords. To protect yourself against phishing, never enter your Google password on any websites except myaccount.google.com.
Keep in mind: YouTube will never ask for your password in an email, message, or phone call. YouTube will never send a form asking for personal information such as ID numbers, financial data, or passwords.
