Step-by-step guide to Facebook privacy and security settings for everyday users

Facebook has a lot of privacy and security options, but most people only touch a few of them when they first sign up. With a few careful tweaks, you can limit what strangers see, reduce unwanted contact and protect your account from being hijacked.

This guide walks you through the most important settings using plain language. The menu names are current at the time of writing, so you can tap through them on your phone or on the web version with the same wording.

Start at the right settings menu

Open the Facebook app, tap the three horizontal lines, then scroll to findSettings & privacyand chooseSettings. On the web version, click your profile picture in the top right, then selectSettings & privacy, thenSettings.

You will see several sections likePrivacy,Profile and tagging,Public posts,Security and loginand more. We will focus on these, since they control who can see you and how easy it is for attackers to break in.

Control who can see your future posts

InPrivacy, look forYour activity. SetWho can see your future posts?to a level you are comfortable with. For most people,Friendsis a good default. It keeps personal updates away from strangers and search engines.

Next, useLimit the audience for posts you have shared with friends of friends or Public. This lets you bulk-tighten older updates, so you do not have to edit each one. It is an effective way to retroactively reduce your footprint without deleting anything.

Review your profile and tagging controls

Go toProfile and tagging. These options decide who can post on your profile, who sees those posts and how tags work. SetWho can post on your profile?toFriendsor evenOnly meif you prefer a clean page.

UnderTagging, limitWho can see posts you are tagged in on your profile?toFriendsor a custom list. Turn onReview posts you are tagged in before the post appears on your profile?. This gives you a chance to approve photos and updates before they show up.

Reduce unwanted contact and lookups

In theHow people find and contact yousection ofPrivacy, you can stop strangers from easily reaching you. SetWho can send you friend requests?toFriends of friendsif you get too many random requests.

You can also decide if people can look you up using your phone number or email. If you do not want marketing contacts or old acquaintances finding you this way, change these toFriendsorOnly me. Consider turning off the option that lets search engines link to your profile, especially if you prefer a lower public profile.

Tighten public posts and comments

OpenPublic postsfrom the settings list. Here you can control who can follow you and who can comment when you post with a public audience. If you only want friends to interact with you, setWho can follow metoFriends.

ForPublic post commentsandPublic profile info, chooseFriendsorFriends of friendsinstead ofPublic. This reduces the chance of spam, harassment or strangers arguing under your updates.

Secure your login with strong protection

Privacy controls are useful only if your account is safe from intruders. Go toSecurity and login. First, checkWhere you’re logged inand log out of any sessions that look unfamiliar or that you no longer use, such as old phones or shared gadgets.

Then update your password. Choose a long passphrase that is unique to Facebook, not shared with email, shopping or other services. Avoid reusing the same secret in several places, because one data breach elsewhere can give attackers an easy path in.

Turn on two-factor authentication

Still inSecurity and login, findTwo-factor authentication. Turn it on and choose your preferred method. An authentication app is usually safer than SMS, since text messages can be intercepted or redirected in some situations.

When two-factor is active, logging in will require both your password and a second step, like a code from an app. This greatly increases security, especially if you access Facebook on public or shared hardware, or if you handle sensitive messages through Messenger.

Get alerts about unknown logins

UnderSecurity and login, look forGet alerts about unrecognized logins. Enable notifications through the app and by email. If someone tries to access your account from a new place or gadget, you will be warned quickly.

If you ever receive an alert you do not recognize, change your password immediately, review recent activity and log out of any suspicious sessions. The faster you react, the less chance an attacker has to change recovery details or contact your friends.

Manage app and website permissions

Go toApps and websitesin the settings menu. This section lists services where you have used Facebook to sign in or that you have connected for sharing. Remove any you no longer use or do not recognize.

Each extra connection is another place where data can flow. Keeping this list short reduces the risk of a third-party service mishandling your information or being compromised and used as a backdoor.

Schedule quick privacy checkups

Facebook offers a guidedPrivacy Checkupthat walks you through key options. You can find it underSettings & privacy. Running this every few months helps you spot new features and reset things that might have changed.

Make a habit of reviewing your settings after major app redesigns, after big life changes or when you add new friends from work. A few minutes of maintenance keeps your account closer to your current preferences instead of old defaults.

Balance convenience with protection

There is no single perfect setup for privacy and security on Facebook. The right balance depends on how social you want to be, how public your work is and how sensitive your personal life feels to you.

Start with the steps in this guide, then adjust gradually. It is better to make a few practical changes and keep using them than to switch everything to maximum lock-down and feel forced to turn it all off again a week later.