The US Navy social media cleanup is no longer a matter of personal branding or online etiquette. In a newly published force-protection bulletin, the Navy has ordered its entire workforce — 340,000 active-duty personnel, 58,000 reservists, and 210,000 civilian employees — to scrub their profiles, lock down their privacy settings, and remove anything that could help an adversary identify who they are, where they live, and when they are likely to be away from home. The directive, called “Epic Vigilance: Immediate Actions for Force Protection and Personal Security,” frames social media not as a personal space but as a battlefield in a broader intelligence war.
US Navy Social Media Cleanup: What Epic Vigilance Requires
Epic Vigilance is a direct response to what the Navy describes as a deliberate, coordinated campaign against its people and its operations. The bulletin warns that adversaries are running a multi-domain effort to collect intelligence, probe defenses, disrupt operations, and intimidate the force. In that environment, a seemingly harmless post — a photo of a ship from a farewell celebration, a check-in at a base gym, a child’s birthday party near military housing — can become a data point in a pattern-of-life analysis that ultimately ends with a targeting decision.
The directive covers far more than active-duty service members. Reservists are included because their civilian lives and military identities intersect in public and often unsupervised ways. Civilian employees are included because they work inside installations, know schedules, and are visible in the same communities. And although the bulletin is addressed to the workforce, the instructions clearly extend to family members. Spouses, children, and roommates who post about military life can leak the same operational details as the service member themselves.
What Is Epic Vigilance?
Epic Vigilance is a force-protection directive issued by the US Navy to active-duty personnel, reservists, civilian employees, and their families. It instructs them to reduce their digital footprint, tighten privacy controls, and report suspicious activity that could indicate hostile surveillance. The bulletin describes a coordinated, multi-domain campaign by adversaries to gather intelligence, test defenses, disrupt operations, and intimidate the force.
The name itself is deliberate. “Epic” signals the scale of the threat; “Vigilance” is the required response. The Navy is not asking for a quick privacy-check moment. It is asking for an ongoing mindset shift, one in which every person connected to the institution treats their online presence as a piece of operational security.
For most people, the immediate question is practical: what, exactly, must be cleaned up and reported? The bulletin gives specific answers, but it also leaves room for judgment, which makes the directive both more useful and more demanding.
What Service Members and Families Must Remove From Social Media
The first requirement is to enable privacy settings on all social media profiles. That sounds simple, but it is not. Privacy settings change frequently, default configurations are often the least protective, and many users maintain multiple accounts on different platforms, some of which they have not touched in years. The Navy is telling its workforce to audit every profile, every photo, every comment, and every tag.
The second requirement is to remove anything that connects a person to the Navy. This includes obvious items like uniform photos, command logos, deployment countdowns, and Navy-related hashtags. But it also includes less obvious connections: a spouse posting about “military life,” a child wearing a Navy shirt, a location tag at a base housing area, or a photo taken on a pier with a recognizable ship in the background. Even a profile picture taken inside a car with a base parking sticker visible can be enough.
The third requirement is broader and more complex: remove anything that reveals patterns of life. This is the part of the directive that goes beyond simple content removal. A pattern of life is not a single post. It is the aggregate of timing, location, routine, relationships, and behavior. If a sailor posts at the same gym every morning, checks in at the same coffee shop after drop-off, and posts photos from home on alternating weekends, an adversary can build a schedule. That schedule, combined with publicly available ship movement data and deployment announcements, can produce a credible window of vulnerability for a home, a family, or an installation.
The Navy is not asking personnel to stop living their lives. It is asking them to stop advertising their lives.
Suspicious Activity That Must Be Reported
Beyond the cleanup, Epic Vigilance instructs personnel to remain on guard and report suspicious activity. The bulletin lists specific scenarios that should trigger a report:
- anyone taking photographs of gates, fences, ships, airplanes, or housing;
- drones flying near installations at night;
- anyone asking questions about ship movements or the schedules of Navy leadership;
- being followed off-base while in uniform;
- fake social media accounts impersonating fellow shipmates.
Each of these items is a known tradecraft indicator. Photographing physical infrastructure is a classic reconnaissance step. Nighttime drone activity can be used to map security responses, spot gaps, or observe patterns in guard rotations. Questions about ship movements and leadership schedules are direct attempts to collect operational information. Being followed off-base in uniform suggests that the adversary is not just watching online; they are watching in person. Fake social media accounts are a way to build trust, harvest connections, and inject misinformation.
The reporting requirement is as important as the cleanup. The Navy wants to see the constellation of suspicious activity, not just the individual dots. One photograph taken by a stranger at a gate might seem trivial. Three such photographs across different bases, matched with drone flights and fake accounts, can reveal a surveillance network. Reporting makes the invisible visible.
How Adversaries Exploit Open-Source Intelligence and Geolocation Data
The underlying threat is open-source intelligence, or OSINT. Any public post, comment, check-in, tagged photo, or fitness-tracker update is a piece of intelligence that can be collected, analyzed, and combined with other open and commercial data sources. The Navy’s concern is that a massive, self-generated dataset now exists online, created voluntarily by millions of people who never intended to become intelligence sources.
The sad reality, as the bulletin implies, is that what starts as casual over-sharing becomes a targeting database. Consider a civilian Navy employee who posts a photo of their new car in the driveway, with the GPS coordinates embedded in the file. A separate post from a spouse mentions they are “home alone” while their partner is on a temporary duty assignment. A third post, from a child, shows a school project with a parent’s naval command printed on a trophy. None of these posts explicitly says “I am a US Navy target.” But together, they provide a map, a schedule, and a vulnerability assessment.
This is why the Navy says the threat is a “deliberate effort to gather intelligence, test our defenses, disrupt our operations, and intimidate our force.” Adversaries do not need to hack a service member’s phone. They do not need to breach a government database. They can simply watch, wait, and aggregate what people post voluntarily.
What Is a “Pattern of Life” and Why Does It Matter?
A pattern of life is the set of regular behaviors, locations, routines, and relationships that defines how a person spends their time. It matters in this context because it is the foundation of operational planning. An adversary who knows when a person leaves for work, when they return, where their children go to school, and when they take vacation can plan a physical attack, a burglary, a kidnapping, or a personal harassment campaign with far greater confidence. The Navy’s concern is that social media has become the easiest way to collect that information at scale.
The military has long understood that predictable routines are dangerous. What changed is that social media now allows adversaries to detect those routines from thousands of miles away, without ever approaching a base or following a vehicle.
Fitness Tracking and the Strava Problem
This is not the first time military personnel have leaked sensitive information through seemingly innocuous digital tools. Fitness-tracking apps have exposed military jogging routes in the past. Strava, in particular, has been a recurring problem. Its public heat map, which aggregates GPS routes from millions of users, has at times revealed the location and shape of military installations, patrol routes, and exercise patterns. Service members who carefully avoided naming their employer online still carried a smartphone in their pocket while running along a perimeter road. That run was recorded, uploaded, and displayed on a global map.
The most striking part of the Strava lesson is how careful individuals thought they were. They did not post about their work. They did not wear uniforms in public. They simply exercised near sensitive sites, and the app did the rest. It is the perfect illustration of why the Navy’s current directive focuses on patterns of life rather than just obvious disclosures.
A similar problem exists with geotagged photos. Many social media platforms automatically attach precise location data to photos. Even when the platform strips the metadata, the post itself may include a location tag, a background detail, or a recognizable landmark. A photo taken at a base housing community, even if taken indoors on a Saturday morning, can reveal where a family lives and when they are home.
The Context: US-Israeli Military Campaign Against Iran
Epic Vigilance arrives amid the ongoing US-Israeli military campaign against Iran. That campaign has created a heightened threat environment for American military personnel across the region and around the world. When the Navy talks about adversaries running a coordinated multi-domain campaign, it is not speaking abstractly. The current geopolitical situation includes direct military operations, cyberattacks, drone threats, ballistic missile attacks, and ongoing efforts to influence public opinion and morale.
For personnel deployed in or near the CENTCOM area of responsibility, the threat is immediate. But the Navy’s directive applies globally. The reason is that adversaries do not limit their intelligence collection to specific war zones. A ship’s homeport history, a sailor’s family address, and the timing of a spouse’s social media posts are relevant to an adversary regardless of where the service member is stationed.
The bulletin’s reference to intimidation is also significant. Adversaries can use publicly available information to threaten family members, spread lies about service members, or create psychological pressure through social media. Fake accounts impersonating shipmates may be used not just for intelligence collection but for reputational attacks, disinformation, and sowing distrust within units. The Navy’s instruction to report these accounts suggests that it sees them as a precursor to more active operations.
Why the Timing Has Drawn Skepticism
Not everyone has taken the notice at face value. The bulletin has arrived at the same time as increased media scrutiny of poor conditions aboard the USS Abraham Lincoln during a long deployment. Reports about living conditions, morale, and health aboard that ship have generated headlines, and some commentators have wondered out loud whether the timing of the social media cleanup conveniently coincides with Navy leadership trying to silence bad press.
That interpretation is easy to understand. If a sailor posts a photograph of a cramped berthing space, poor-quality food, or a broken piece of equipment, that image can quickly become a symbol of institutional failures. Telling sailors to remove anything that connects them to the Navy could be seen as a way to suppress uncomfortable transparency.
But the underlying threat is real, and it does not disappear because the announcement has political overtones. Adversaries have used social media to target military personnel for years. The examples cited in the bulletin — drone flights, photography, impersonation, following personnel off-base — are not hypotheticals. They are documented categories of hostile activity. A directive that reduces the attack surface is prudent regardless of when it is published.
It is possible for both things to be true. The Navy may genuinely want to protect its people from surveillance, and some leaders may also welcome a reduction in unflattering online criticism. The task for observers is to separate the operational value of the directive from the political convenience of its timing.
What This Means for Everyone, Not Just the Navy
Whatever the politics, the underlying advice is sound for every internet user. Lock down what you share. Be on the lookout for social engineering. Do not assume that your online “private life” is actually private. The mechanisms the Navy is worried about are the same mechanisms that criminals, stalkers, insurers, employers, and foreign intelligence services use against ordinary civilians every day.
The phrase “patterns of life” is not military jargon. It describes how anyone can be understood through their digital footprint. A car parked in the driveway every weekday evening, a phone that checks into the same coffee shop every morning, a photo posted from the same park every Saturday — these data points can tell a fuller story than a person ever intended. They can also be used to harm that person.
The practical guide is simple. Review every old post and remove anything you would not want a stranger — or an adversary — to see. Turn off geotagging on cameras and social media platforms. Disable the public sharing of fitness routes. Protect your profile pictures and cover photos. Limit old posts to friends and be conservative about who you accept as a friend. Ask family members not to tag you when your location or routine is visible. And if you notice someone taking photos of infrastructure, asking unusual questions, operating a drone at night, or creating fake profiles, report it. The Navy’s force protection model works because a million eyes are watching. That same principle works for any community.
The US Navy social media cleanup is a reminder that operational security is not only a military responsibility. In an environment where surveillance is cheap, data is plentiful, and adversaries are patient, privacy is a form of defense. The lesson of Epic Vigilance is that the person best positioned to protect you is often you — by refusing to hand over the information that makes you visible, predictable, and vulnerable.
