Online Conversations: What to Share and What Not To
A step-by-step guide to what is safe to share in online conversations — the three tiers, security-question details, photo backgrounds, reading pace, and declining gracefully.
Very little of what gets used against people online was stolen. Most of it was shared, in ordinary conversation, one harmless detail at a time. This guide sorts what people typically share into three tiers, explains why the apparently trivial tier matters most, and offers a way to decline that does not turn into a confrontation.
Advertisement
| Before you start | Short answer |
|---|---|
| What is the riskiest category? | Not passwords — those nobody shares. It is the small biographical details that answer security questions. |
| What is the useful test? | How fast is this being asked for? Pace is a better signal than any single question. |
| How do I say no without a scene? | Answer a different, smaller question. You almost never have to refuse directly. |
Advertisement
Step 1 — Sort it into three tiers
| Tier | Examples | When |
|---|---|---|
| Fine early | First name, city, the kind of work you do, interests, opinions, taste. | From the first conversation. This is what conversation is. |
| Later, once verified | Employer name, neighbourhood, your daily routine, family details, your other social accounts. | After a live video call and time. There is no reason to rush any of it. |
| Never, to anyone | Verification codes, passwords, full date of birth, ID or account numbers, home address, bank or payment details, images you would not want copied. | No exceptions, however long you have been talking. |
Advertisement
Step 2 — Understand why the small details matter
The bottom tier is obvious and almost nobody gives it away. The middle tier is where problems actually come from, because each item feels harmless on its own.
- They answer security questions. First school, mother’s maiden name, first pet, street you grew up on — these are account recovery answers, and they arrive naturally in friendly conversation.
- They combine. Employer plus neighbourhood plus a photo of your building is an address. Each piece alone is nothing.
- They establish routine. When you leave, when you are away, when the house is empty.
- They identify other people. Your family and colleagues did not agree to any of this.
A useful habit: treat anything that could be a security question as belonging to the bottom tier, whatever it feels like in conversation.
Step 3 — Watch what photos and voice notes carry
- Check the background before the subject. Street signs, house numbers, a view from a window, a number plate, a uniform, a document on a table.
- Send a photo rather than the original file. Original files carry hidden data including, if tagging is on, the coordinates where it was taken.
- Assume anything sent can be saved. Disappearing messages can be screenshotted or photographed with a second phone.
- Be aware that a photo used elsewhere can be traced back. A picture that also appears on a public profile connects a private conversation to your real identity.
Step 4 — Notice the pace
A single question is rarely the signal. The rate at which personal territory is covered almost always is.
What it looks like: you know a lot about them in outline and very little that is checkable, while they know a great deal about you specifically. Why it matters: an ordinary conversation trades. A gathering exercise collects. What to do: ask something specific and checkable back, and notice the quality of the answer.
What it looks like: intense warmth within days, talk of a future, a sense of being unusually understood. Why it matters: the warmth is what makes a later request work, so it has to arrive quickly. What to do: notice the speed itself. Real closeness does not run to a schedule.
What it looks like: repeated interest in whether you live alone, when the house is empty, how much you earn, or what you have saved. Why it matters: none of these are ordinary conversational questions from someone you have not met. What to do: answer vaguely once. If it is asked again, that is your answer.
Step 5 — Decline without a confrontation
Most people share more than they meant to because refusing feels rude. It does not have to be a refusal.
- Answer a smaller version. "Which area do you live in?" → "West side of the city." Complete, friendly, and not an address.
- Move it to later. "I keep that sort of thing for people I have actually met."
- Turn it back. "Why do you ask?" — asked lightly, this is remarkably effective, and the quality of the answer tells you a lot.
- Say nothing about it and change the subject. Perfectly normal in conversation and requires no justification.
- Be direct if you prefer. "I would rather not." Anyone who argues with that has answered your question.
Step 6 — A short check before you send
- Could this answer a security question? If yes, it belongs in the never tier.
- Does this identify where I am, live or work? Including through a photo background.
- Does this involve someone who has not agreed?
- Would I be comfortable if this was forwarded? Because it can be, by anyone, at any point.
Common questions
Time spent talking is not verification. A long conversation with an unverified person is still a conversation with an unverified person. A short live video call changes more than six months of messaging does.
Reciprocity is a real social instinct and it is also a technique. Nothing they told you was necessarily true, and there is no obligation created by a disclosure you cannot check.
Yes. Combined with a name and a city it is a building block for identity verification at a surprising number of institutions. The day and month are fine to celebrate; the year is worth keeping.
Change any security questions that have now been answered in conversation, turn on two-step verification, and stop adding to it. Most of the risk comes from the combination continuing to grow.
No. The top tier is most of what conversation consists of, and it is meant to be shared. The point is only that the middle tier waits until there is a reason to trust, and the bottom tier does not move at all.
The six steps in one place
- Three tiers — fine early, later once verified, never.
- Small biographical details are security questions in disguise.
- Read photo backgrounds, and send photos rather than original files.
- Watch the pace, not any single question.
- Decline by answering smaller, or by asking why.
- Four questions before you send anything personal.
