
Next week on the blog: What to do if your library’s social media accounts are hacked!
Two years ago, I listened to two episodes of the Social Media Examiner podcast that gave me nightmares.
The first episode featured an interview with a fitness instructor who lost control of ALL her accounts in the span of an hour. Her quest to gain control back was a saga I don’t ever want to experience.
The second episode featured an interview with the Social Media Examiner team as they recounted the day they lost control of their own Facebook business account.
If it can happen to Social Media Examiner, it can happen to your library.
Here’s the truth: most of us are too trusting. We probably don’t think a social media security breach will never happen to us. But we couldn’t be more wrong. In the first six months of 2020, the data protection company ZeroFOX reported a 95 percent increase in threat activity on social media accounts, compared to the last six months of 2019.
We may be even more vulnerable right now, with staff members working from home and resources stretched thin. One library I know allows more than three dozen staff members to post on their various social media accounts. I’m happy to say they are taking steps to beef up their social media security. But I fear there are too many libraries who operate in this way.
Anti-virus and malware software are essential, but that’s only half the battle. You need to take steps to protect your library’s social media accounts from compromise. Here’s how to do that.
Limit access to your social media accounts.
If you have a large team of people who post for you, consider trimming to no more than five admins for all social media accounts. Most platforms like Facebook or LinkedIn will let you assign roles to people. Limiting access is a good way to protect your full account’s security.
What should you do if you have a large social media team who currently post on your accounts? Ask your team to send pre-written posts with photos, videos, and graphics to a team leader via email or a shared file system like Google Drive, Trello, or Base Camp. Your social media account admins can pull and post that pre-written content.
Create an email exclusively to manage your library’s social media accounts.
This step will prevent your social media accounts from being compromised if one of your admins accidentally opens a suspicious link or file in their own work or personal email.
Use two-step authentication.
Most platforms will ask you to enter a randomly generated code every time you log in. Take the extra step. It’s better to choose safety over convenience.
Pick strong, unique passwords.
According to the digital risk protection company Idagent, 80 percent of data breaches in 2019 were caused by password compromise. That’s why choosing a strong password is critical.
Strong passwords contain:
- At least six characters.
- A combination of numbers, symbols, and letters.
- Letters in both upper and lowercase characters.
- No connection to your library. Don’t use the name of your mascot or the numerical portion of your street address in your password.
The easiest way to create strong passwords is to use a secure password generator like Passwordsgenerator.net. You should also consider a process for storing your passwords in a secure location, like a locked file on your Share drive. You could choose to pay a small fee for a password manager like LastPass.com and 1password.com.
Finally, you must also be sure the password you use for each social media platform is unique. Don’t use the same password across all your accounts.
Change your passwords often.
Don’t get too attached to your passwords. Changing them is an inconvenience, but it’s a small price to pay for peace of mind.
A good rule of thumb is to change your passwords at least every quarter, but more often is even better. You should also be sure to change all passwords anytime a staff member who had access to your social media accounts leaves the library’s employment.
Don’t use your library’s public Wi-Fi.
The U.S. Securities and Exchange Commission warns that public Wi-Fi is not secure. Cybercriminals easily gain access to passwords and other data on these types of wireless networks. Use your staff Wi-Fi or a Digital Subscriber Line (DSL) if available.
If you are posting on a mobile device in a location outside the library with public Wi-Fi, use your cell service instead of the public Wi-Fi. Cell service providers use encryption to ensure safety. You may need to consider the purchase of a library-owned device with cell service so staff aren’t using their personal cell service to post for the library.
Did I miss anything? Did your library experience a social media attack and if so, how did you handle it? Let me know in the comments below.
You may also like these posts
Five Easy Fixes for the Little Mistakes That Threaten to Sabotage Your Library Marketing!
Latest Book Review
The Heiress by Molly Greeley
Subscribe to this blog and you’ll receive an email every time I post. To do that, click on the “Follow” button in the bottom left-hand corner of the page. Connect with me on YouTube, Twitter, Instagram, and LinkedIn.







It’s Not Personal: How to Deal with Negative Comments and Bad Online Reviews of Your Library
The lowest moment in my library career came about four years ago, when my library endured a year of bad press.
First, a local TV news station ran a story about drug overdoses at the library. Then, our administration briefly entertained the idea of selling a portion of our main library building to a developer, to raise funds for the renovation of other library branches in our system. You can imagine how the community surrounding the main library reacted.
Our marketing department handled the press coverage well. But, in the fallout, we noticed that the negative press coverage led to negative reviews of our library.
Our services hadn’t changed. Our commitment to the community hadn’t changed. But the negative news stories changed the public’s perception of us.
It played out several times a week when we would post announcements on social media. We were met with comments from people who used those posts to try and steer the conversation to the negative library coverage. I admit, it was exhausting and frustrating.
If you are lucky enough never to be the target of negative press coverage, your library will still have to deal with negative comments, one-star reviews, and NextDoor drama. Even when you are trying to make a difference in the community, you’ll be targeted by complainers.
Negativity is bad for you and bad for your library
Ignoring negative reviews and comments is not an option. They have the power to damage your library’s reputation. A study by Moz.com shows one negative review can drive as many as 30 people away from your library. The more negative reviews and comments you have, the more people you lose, according to the data.
Negative reviews can also hurt your library’s ranking in search. Search engines generally list the highest ranked organizations and businesses first.
What can you do?
It doesn’t matter if your library is giving away $10 bills with every checkout… someone is going to find something to complain about. They’ll probably do it online.
It’s hard to know how to handle the situation when an irate, antagonistic library user posts a negative review on a social media site or website. Your immediate reaction is to jump into firefighter mode, drag out the fully charged hose, and put out the flames… pronto.
But it’s important to take step back and see the opportunity in that negative review. It’s your chance to turn that angry user into an evangelist for your library.
If that sounds like an extreme possibility, I want you to read this post by Jay Baer. I’ve heard Jay speak at several conferences. He has taught me everything I know about turning negative reviews into positive customer experiences.
Create a process for responding
A plan for responding to negative reviews and comments is a form of a crisis communication plan. If you have a plan in place before you’re confronted with negativity, you can put your emotional reaction aside and respond calmly, rationally, and with empathy.
A thoughtful and measured response to a negative comment makes your library look human. When you respond to critics, you show that you value all your customers and their opinions. Your plan will have four components.
Respond as quickly as possible. It’s important to address the issue as soon as you can. Talk with staff and senior leaders about monitoring your social media channels and email as closely as you can. There should always be someone who can check the accounts, even at night or on the weekends. If you don’t, you’ll run the risk of other haters hijacking the thread and turning one bad review into a free-for-all.
Don’t censor. Unless the comment violates your social media or website standards of behavior, don’t hide the comment.
If the problem cannot be solved easily online, take it offline. Apologize and address the complainer with empathy, then ask them to contact you by email. You can say, “I’m sorry to hear you are having this problem. We want to make it right. Could you email me at **** and give me some more details about your experience? Then I can make sure your issue gets in front of the right person and is addressed.”
But try to remember that you cannot please everyone. Occasionally, someone will complain about something and you will not be able to fix the problem. Apologize, explain your library’s side of the situation as best you can, and move on.
Encourage library fans to give positive reviews to outweigh negative reviews and increase your overall search engine rankings. Find ways to solicit reviews from the people who love your library. Amplify those good reviews by sharing them on social media, in emails, and in your print promotional material.
You Might Find These Articles Helpful
Four Daring Ways to Fight Library Haters
Worries in the Library World: Here are Answers to Your Four Biggest Library Marketing Concerns Right Now!
Latest Book Reviews
Oona Out of Order by Margarita Montimore
The Hilarious World of Depression by John Moe
Find more 60-second Book Reviews here.
Subscribe to this blog and you’ll receive an email every time I post. To do that, click on the “Follow” button in the bottom left-hand corner of the page. Connect with me on YouTube, Twitter, Instagram, and LinkedIn.
Share this: