Getting Your Facebook Data Actually Lockdown
I spent a solid evening going through my own Facebook settings last month. Not because I was paranoid, but because I wanted to know what data was actually leaving the platform. What I found was standard — most of the big switches are in predictable places — but there are a few hidden corners that catch people off guard. I will walk you through it. The first thing most people miss is that Facebook's privacy settings are not a single panel. They are scattered across three different menus. If you only change one thing, you probably will not change anything meaningful. So let us get the order right and work through each section methodically.
Unlock The Secrets Of Facebook Privacy A Stepbystep Guide To Making Facebook Private
Start here: open Facebook on your phone or browser, tap the menu icon (three horizontal lines), then go to Settings & Privacy and select Settings. You will land on a page titled "Account Settings." From there, the path is straightforward but you need to hit four distinct areas. Area one: General Account Settings. Click this at the top of the list. Look for the row that says "Who can see your future posts?" Change this from "Friends" to "Only me." This is the single most impactful switch. It changes the default audience for every new post you make going forward. Do not skip it. I have seen people set this to "Friends" and then spend twenty minutes after each post manually locking it down. That is not a sustainable workflow. Area two: Profile and Tagging. This is where the real damage accumulates over time. Go into "How people find and contact you." Set "Who can send you friend requests?" to "Friends of friends." That cuts down on random connection spam significantly. Then look at "Who can post on your profile?" and set it to "Only me." This stops other people from tagging you in things that could leak information about you without your consent. Next, go to "Profile information" and audit every single field. Anything that does not need to be public should be changed to "Only me" or removed entirely. I learned this the hard way when I realized my workplace email was still listed as public on my profile, and a recruiter had found it through a simple search five years ago. The fix took about three minutes once I knew where to look.
Area three: Privacy Checkup. This is a guided tool that Meta built specifically to help people walk through the major settings. It is not always obvious where to find it. In the main Settings menu, look for a section called "Your Facebook Information" and tap "Access Your Information." From there you will see "Privacy Checkup." Run through all three steps. Step one checks who can see your profile information. Step two reviews your posting preferences. Step three looks at your apps and platform connections. I usually recommend doing this fresh every six months, not just once and forgetting about it. Facebook updates their interface frequently and sometimes moves things around. Area four: Apps and Websites. This is the section most people ignore and it is the one that matters most for ongoing privacy. Go to "Your Facebook Information," then "Apps and Websites." This shows every third-party app that has access to your Facebook data. Game apps, quiz apps, fitness trackers — they all linger here long after you stop using them. Go through the list. For anything you do not actively use, click "Remove" or "Edit" and revoke permissions. You will be surprised at how many abandoned apps are still pulling your data. I found three fitness apps from 2019 that still had read access to my friend list. That was not a small list either. After revoking them, the connected apps count dropped from eleven down to four. There is an important detail about the Ads section that beginners typically miss. In Settings, go to "Ads" and then "Ad Settings." You will see options for "Advertisers who can use your data for tailored ads." Turn this off. You also want to visit "Advertiser domains" and remove any third-party domains that are allowed to show you ads based on your Facebook activity. This does not stop ads from being shown to you, but it does cut the amount of personal data Facebook shares with ad networks. The difference is subtle but technically significant. Advertisers will still target you, just with less specific data points.
Get the Full Details

Here is a practical edge case that nobody warns you about. If you use Facebook Login to sign into other services — Spotify, Airbnb, various news sites — those connections stay active even if you set your profile to private. Go back to "Apps and Websites" and review each entry carefully. Some services ask for access to your friend list or your public profile. If you do not need a service to know your social graph, revoke that permission or disconnect entirely. I disconnected a travel booking site that had retained my entire friend list even though I had not used it in two years. It was still receiving data updates in the background. Disabling it stopped that immediately. One more thing that requires attention: search engine indexing. In "Profile and Tagging," look for "Do you want search engines outside Facebook to link to your profile?" This is almost always enabled by default. Turn it off. When this setting is active, Google and other search engines can index your public Facebook profile. Even if your posts are set to "Friends only," basic profile information like your name, hometown, and profile picture can still appear in search results. I discovered this when my full name and city showed up on a professional networking site's search page, directly linked to my Facebook profile. Turning off search engine indexing eliminated that exposure within a day or two. The process takes roughly fifteen to twenty minutes if you already know where everything is. If you are going in blind and auditing every setting carefully, plan on thirty to forty-five minutes. The time investment is worth it because the default settings are designed to maximize data sharing, not minimize it. Facebook makes it deliberately easy to share widely and slightly inconvenient to restrict access. That is not an accident. It is a business model decision.
There is a limitation you should be aware of. Even after completing all of the above, Facebook still collects metadata about your activity. Which links you click, how long you linger on content, what videos you watch. This tracking happens regardless of your privacy settings. The settings I described control who can see your profile information and posts, but they do not stop Facebook's own analytics from functioning. If you want to reduce that tracking, the most effective step is to use a privacy-focused browser extension that blocks Facebook's tracking pixels and third-party cookies. Tools like Privacy Badger or uBlock Origin handle this well. They do not require changing any Facebook settings at all. If you want a downloadable reference sheet with all the settings in one place, Meta provides an export of your own information at facebook.com/settings?tab=privacy. That page lists every active setting and its current value. It is useful for verifying that your changes stuck. I keep a bookmark to that page and check it every few months to make sure nothing has reverted after a platform update. The settings themselves do not expire. They persist until you change them again or Meta pushes an update that resets them, which happens roughly once a year. I have noticed that after major UI updates, some settings revert to their previous values. Always re-check the four key areas after any significant Facebook update. The effort of a ten-minute review saves you from unknowingly re-sharing data you previously restricted.