When using Potato to chat, the biggest fear isn't sending a message to the wrong person, but having your privacy settings not properly configured, allowing strangers to add you to groups, see your phone number, or even log into your account on another device. In fact, Potato's privacy options are hidden in "Settings > Privacy and Security," but many people have never opened it. This checklist will help you go through chats, groups, contacts, and active sessions step by step. Follow it, and you can block most risks.
1. Chat Privacy: Control Who Can Message You and Add You as a Friend
Open Potato's "Settings > Privacy and Security," and the first module is "Chat." Here are several key toggles; we recommend checking them in the following order:
- Who can send me messages? The default may be "Everyone," but if you're often bothered by strangers, change it to "My Contacts" or "Contacts and Trusted People." Note that after changing to "My Contacts," messages from people not in your contact list will be rejected, but the sender won't receive a clear notification.
- Who can add me as a friend? Similarly, it's recommended to set this to "My Contacts" to prevent strangers from adding you directly via phone number or username.
- Who can forward my messages? If you don't want your messages to be forwarded to other groups or channels, set this to "No One." This prevents others from forwarding your messages, but screenshots cannot be prevented.
Additionally, in the "..." menu at the top right of the chat interface, there's a "Secret Chat" option. If you need high confidentiality with someone, you can start a secret chat, which uses end-to-end encryption and does not support message forwarding. However, note that regular chats and group chats do not use end-to-end encryption by default, so avoid sending sensitive information.
2. Groups and Channels: Avoid Being Added by Strangers
Many Potato users complain about being "mysteriously added to dozens of ad groups." The issue lies in group privacy settings. In "Privacy and Security," find "Groups and Channels," and you'll see the option "Who can add me to groups or channels?" The default may be "Everyone," so be sure to change it to "My Contacts" or "No One."
Additionally, if you've already been added to some spam groups, you can tap "Leave Group" at the bottom of the group info page, and check "Delete chat history for this group" to avoid residual data. A more thorough approach is to disable "Group Invitations" notifications in "Settings > Notifications," so even if someone adds you, it won't pop up and disturb you.
If you create your own group, it's recommended to enable "Approve New Members" in group settings, so no one can join directly without admin approval. For public groups, you can also set the "Group Type" to "Private," so only those with the invite link can join, and it won't be searchable.
3. Contact Privacy: Hide Phone Number and Online Status
Potato may show your phone number to contacts by default, but many users don't know how to turn it off. In "Privacy and Security," find the "Phone Number" option. You can set "Who can see my phone number," and it's recommended to set it to "No One" or "My Contacts." Note that even if set to "My Contacts," your contacts may still find you on Potato via your phone number. If you want to hide completely, it's best to change your username in "Settings > Account" and use your username instead of your phone number for adding.
Also, check the visibility of "Online Status" and "Last Seen." If you don't want certain people to see when you're online, set it to "My Contacts" or "No One." However, note that if you set it to "No One," you also won't be able to see others' online status, as per Potato's reciprocity rule.
4. Active Sessions: Clean Up Unknown Devices
This is the most overlooked but most important step. In "Settings > Privacy and Security," find "Active Sessions." This lists all devices logged into your account, including phones, computers, and tablets. If you notice a device that isn't yours, or an old phone you used long ago, immediately tap that session and select "Terminate Session."
Specific scenario: For example, you logged into Potato Web on a friend's computer last week but forgot to log out. Now, when you open the active sessions list, you see a record showing "Windows PC - Beijing," but you're currently in Shanghai and haven't used that computer. Don't hesitate; tap "Terminate Session" immediately. Also, it's recommended to enable "Two-Step Verification" (in "Settings > Account") and set an additional password, so even if someone knows your phone number, they can't easily log into your account.
Additionally, if you receive a "New device logged in" alert but you didn't initiate it, immediately terminate all sessions and change your Potato password. If your account has been compromised, you can use the "Forgot Password" feature to recover it via SMS verification code, but only if your linked phone number is still in use. If you've lost your phone number, you'll need to contact Potato support, but the process may be lengthy, so always keep your phone number safe.
5. Troubleshooting Common Issues
Issue 1: I changed my privacy settings, but my friend can still see my phone number? This might be because you've had chat history with that person before. Potato treats historical contacts as "My Contacts," so you need to manually delete that friend from your "Contacts" list or re-set the "Phone Number" option to "No One."
Issue 2: I set "No One" can add me to groups, but I'm still being added? Check if "Allow Adding via Link" is enabled. If your username or link is public, anyone can add you via the link. It's recommended to turn off "Allow Adding via Link" in "Groups and Channels," or periodically change your username.
Issue 3: An unknown device appears in active sessions, but after terminating, it logs in again? This indicates your account may have been compromised, and the attacker might have obtained your verification code or two-step verification password. Immediately change your password and enable two-step verification. If the issue persists, it's recommended to log out of all sessions in "Settings > Privacy and Security" and log in again.
Finally, privacy settings are not a one-time fix. It's recommended to check active sessions every few months and keep an eye on Potato's update announcements, as new versions may add or adjust privacy options. If you have further questions about specific operations, you can refer to Potato's FAQ, which contains many cases users have encountered. Additionally, if you're concerned about chat content leakage, you can read our Privacy Protection Guide for more tips on message destruction and encrypted chats. If you plan to use Potato on multiple devices, it's recommended to read the Potato Download and Installation Tutorial to ensure you get the app from channels and avoid downloading malicious modified versions.
This checklist covers the core modules of Potato privacy, but remember, security ultimately depends on your usage habits. Don't click on links from strangers, don't stay logged in on public computers, and never share your verification codes with anyone. Potato provides the tools, but whether and how you use them is up to you.
Continue reading: downloads and installation, accounts and verification codes, groups, channels, and bots, and privacy and security.
