How do I fully lock and secure my Facebook profile?

General
1

I want to lock my Facebook profile so only friends can see my photos, posts, and personal info. I’m worried about strangers viewing or saving my content and I can’t figure out which privacy settings or tools I should use. Can someone walk me through the steps to properly lock and protect my Facebook profile?

2

Short version. You lock Facebook by tightening 4 areas: profile, posts, tagging, and search. Here is a step by step you can follow.

  1. Run Facebook’s Privacy Checkup
    • On phone: Menu > Settings & privacy > Privacy shortcuts > Privacy Checkup
    • On desktop: Top right arrow > Settings & privacy > Privacy Checkup
    Walk through each section and set everything to “Friends” or “Only me” where possible.

  2. Lock your profile info
    • Go to your profile > About
    • For each section (Contact info, Work and education, Places lived, Family, etc) hit the little audience icon.
    • Set sensitive stuff to “Only me”.
    • For things you still want friends to see, choose “Friends”.
    • Turn off “Show to friends of friends” for anything personal.

  3. Limit old posts in bulk
    • Settings & privacy > Settings > Privacy
    • Find “Limit the audience for posts you shared with friends of friends or Public”
    • Hit “Limit past posts”.
    This flips old “Public” and “Friends of friends” posts to “Friends”.
    You can still go to your profile > Filters > Manage posts to delete or hide specific old stuff.

  4. Lock who sees your future posts
    • Settings & privacy > Settings > Privacy
    • “Who can see your future posts” > set to “Friends”.
    • Make sure the same under “Stories” and “Reels” sections, set them to Friends.

  5. Stop public profile scraping
    • Settings > Privacy > “How people find and contact you”
    Set:
    • Who can send you friend requests: Friends of friends
    • Who can look you up by email: Friends
    • Who can look you up by phone: Friends
    • Do you want search engines outside Facebook to link to your profile: Turn this OFF.

  6. Tweak profile photo and cover photo
    • Your default profile and cover images usually stay at least partly public.
    • Click each photo > the audience icon > change to “Friends” where FB allows it.
    • For the main profile picture, pick a neutral image if you worry about strangers.
    • For older profile pictures, open the album “Profile Pictures” and set each to Friends or Only me.

  7. Timeline and tagging controls
    • Settings > Profile and tagging
    Set these:
    • Who can post on your profile: Friends or Only me
    • Who can see what others post on your profile: Friends
    • Review posts you are tagged in before they appear: Turn on
    • Review tags people add to your posts: Turn on
    This stops friends from exposing you to strangers by tagging.

  8. Lock story and reels privacy
    • On the main screen, tap “Create Story” > gear icon
    • Set Story privacy to Friends.
    • For Reels:
    Menu > Settings > Reels
    Set default audience to Friends.
    Stories and Reels often default to wider visibility than normal posts.

  9. Turn off “Public” stuff from apps and likes
    • Settings > Apps and Websites. Remove old apps you do not use.
    • On your profile, check Likes sections. For each category, hit the three dots and set it to “Only me” if you want it private.

  10. Use “Profile locking” if available in your country
    Some regions have a one-click “Lock Profile” option.
    • Go to your profile
    • If you see “⋯” near Edit profile, tap it
    • Tap “Lock Profile”
    That pushes most things to Friends, hides timeline info from non friends, and reduces full size profile photo access. If you do not see it, your region does not support it yet, so stick to the manual steps above.

  11. Extra security so no one hijacks your account
    • Settings & privacy > Settings > Security and login
    • Turn on Two factor authentication. Use an authenticator app if possible.
    • Turn on alerts for unrecognized logins.
    This does not change who sees content, but it protects against someone breaking in and changing your settings.

  12. Test how strangers see you
    • Go to your profile
    • Click the three dots > “View As”
    • Check what a public viewer sees.
    • If you see anything sensitive there, go back and tighten that specific item.

Data point from FB’s own docs:
If your audience is “Friends”, only confirmed friends see it. Friends of friends or Public greatly increases reach, since each friend has on average a few hundred connections. Tightening to “Friends” cuts random exposure a lot.

If you want near total lock:
Set everything to “Friends” or “Only me”.
Turn off search engine linking.
Review tags.
Keep your profile picture and cover as neutral as possible.
Do a “View As” check every few months.

This is pretty much the max you can do through settings. The last piece is behavior. Anything you never want leaked, do not upload at all, since friends can still screenshot, save, or forward content.

3

You’ve already got a solid roadmap from @codecrafter for locking things down in the “normal” way. I’ll add some extra angles that FB doesn’t really advertise, and I’ll push back on a couple of his points.

1. Separate “real life” from “public” with a decoy layer

If you’re seriously worried about strangers saving content, settings alone are not enough. Friends can screenshot too.

What actually works in practice:

  • Keep your main account: real name, real friends, tight privacy like he described
  • Create a light second presence:
    • Minimal info
    • Neutral profile pic
    • Basically a “front-facing” profile for random adds or work / school contacts
  • Avoid posting personal pics or family stuff on anything that might ever be public

This way, if someone must find you, they hit the decoy, not your real life.

2. Lock your contact graph, not just posts

People forget how much Facebook leaks through “friends” and “mutuals”.

Check these and tighten hard:

  • Go to your profile > Friends tab > three dots > “Edit privacy”
    • Set:
      • Who can see your friends list: Only me
      • Who can see the people, Pages and lists you follow: Only me or Friends

Why this matters: strangers can use your friends list to stalk your social circle even if they cannot see your posts. @codecrafter didn’t emphasize this enough imo.

3. Turn off facial recognition / face templates

If this is available in your region:

  • Settings & privacy > Settings > Face recognition
  • Turn it off

That reduces how easily you get auto suggested or pulled into tag-suggestion systems. Not magic, but one less data point feeding the machine.

4. Kill “off Facebook” tracking as much as possible

Not directly about profile visibility, but if you are in lock-down mode, you probably care about data too:

  • Settings & privacy > Settings > “Off-Facebook activity”
  • Clear history
  • Turn off future activity

This does not hide your posts, but stops some creepy ad targeting that uses your activity on other apps and sites.

5. Clean your audience lists and “friends” themselves

This is the part nobody wants to hear:

  • Go through your friends list and remove:
    • People you do not recognize
    • Old classmates / coworkers you do not trust
    • Random “mutual friend” adds

Your privacy is only as strong as your dumbest friend who might forward your stuff, take screenshots, or show your profile to someone you are avoiding. Settings cannot fix bad boundaries.

6. Use “Restricted” for people you cannot unfriend

For relatives, coworkers, or nosy people you cannot delete:

  • Go to their profile > Friends > “Edit Friend List”
  • Add them to Restricted

People on Restricted only see your public content. If you set everything to “Friends,” they basically see nothing except maybe your profile pic and cover.

This trick is underrated and honestly more useful than profile locking in some situations.

7. Be careful with groups and comments

You can have your profile super locked but still leak info by:

  • Commenting on public pages
  • Posting in public groups
  • Reacting to public posts

Anyone can click your name from a public comment and see whatever your “View As” public view shows. So:

  • Prefer closed / private groups for personal topics
  • Avoid oversharing in comments on viral or news posts
  • Do an occasional audit of your old comments and delete ones that feel too revealing

8. Don’t rely on “Friends” for everything

Tiny pushback on the “set everything to Friends and you’re good” idea.

If the content is:

  • Sensitive (kids, address clues, workplace drama, health stuff)
  • Or could be used to harass you or identify where you live or work

Set it to Only me or Custom and share in DMs or small group chats instead. “Friends” could still mean 200+ people.

9. Use “Custom” and “Friend lists” for more control

This is more work but much safer:

  • Create friend lists:
    • Close friends
    • Family
    • Work people
  • When posting, use:
    • “Custom” > include only the list you want
    • Or “Friends except…” and exclude “Work” for personal stuff

You do not have to treat all friends equally. Facebook’s defaults pretend you do.

10. Assume screenshots are forever

Final reality check: no setting can stop:

  • A friend taking a screenshot
  • Someone taking a photo of their screen
  • People repeating what they saw

So if something would seriously damage you, mentally treat Facebook like a public bulletin board and simply never upload that thing at all.

In practice, a solid setup looks like:

  • Friends list: Only me
  • Followers: Off or Friends
  • Most posts: Friends or custom lists
  • Sensitive posts: Only me or very tight custom
  • Profile & cover: neutral images, cropped to avoid background clues
  • Restricted list used aggressively
  • Second lightweight profile for “public” presence if needed

You will never be 100 percent invisible, but you can make yourself extremely boring and hard to dig into for strangers, which is basically the win condition.

4

You’ve already got the “how to click every setting” walkthrough from @codecrafter and the extra paranoia layer from @chasseurdetoiles. I’ll zoom out a bit and focus on what to prioritize and where I’d do things differently so strangers can’t quietly archive your life.

1. Treat “Friends” as semi‑public, not private

Both replies lean heavily on “Friends” as the default. I’d go tighter for anything that can identify:

  • Your kids
  • Your daily routine / neighborhood
  • Health issues
  • Work drama

Use:

  • Only me for stuff you mainly want as a personal archive.
  • Custom for small, trusted circles.
  • Friends except… for people you know are gossip hubs or oversharers.

Practical habit: before you hit Post, ask “If this walked into a screenshot group chat, am I OK with that?”

2. Your friends list is a huge leak

Here I agree more with @chasseurdetoiles than with the “standard” lock steps.

Make this a priority:

  1. Go to your profile
  2. Friends tab → three dots → Edit privacy
  3. Set:
    • Friends list: Only me
    • Following: Only me or Friends

Strangers use mutuals to map your social life even when your posts are hidden. Locking this is almost as important as locking photos.

3. Unfollow vs unfriend vs restrict

You do not need to blow up relationships to be private:

  • Unfollow: you stay friends but do not see their posts. Good for drama minimization.
  • Restrict: they basically see only public content from you. If your default is “Friends,” they see very little.
  • Unfriend: use this more often than you think for very old or random people.

Strategy that works well:

  • Default audience: Friends
  • Put nosy coworkers / distant relatives on Restricted
  • Truly sensitive posts: Custom list of 10–20 people you actually trust

4. Audit your “footprint,” not just your settings

The privacy menus only control what happens going forward or at the profile level. Two things people forget:

a) Old public comments & likes

  • Any comment you left on public pages or groups is a doorway into your profile.
  • Open your Activity Log and scan old comments on controversial or personal topics. Delete what feels too revealing.

b) Photos you didn’t post

Even if you lock your albums, other people’s uploads can still expose you:

  • Turn on tag review.
  • When you deny a tag, also click through and ask the friend to change the audience if it is really sensitive.

You can’t fully control others, but you can reduce how directly those posts point back to you.

5. Stop “background leaking” via metadata & habits

Some extra angles neither answer talked much about:

  • Avoid photos that show your house number, street signs, school logos, or work badges.
  • Do not post in real time from places you visit regularly. Post later, or not at all.
  • If you use location tags, reserve them for generic places and tourist spots, not your daily coffee shop.

Think of each post as a puzzle piece. Strangers do not need one very revealing photo if you give them 50 slightly revealing ones.

6. Follow fewer random pages and join fewer public groups

Your likes and groups tell people a lot, even if your posts are locked.

I’d:

  • Hide your liked pages categories to Only me.
  • Leave public groups where you have ever overshared.
  • Prefer private or “hidden” groups for personal topics.

You can still use public groups, but keep your identity-light there: no photos, no specifics about where you live or work.

7. “Profile Locking” is decent, but not magic

If your region has Facebook’s built‑in Profile Lock:

Pros:

  • One click to shove most content to “Friends”
  • Limits full-size profile photo access for non‑friends
  • Good for people who don’t want to dig through 20 menus

Cons:

  • You might think you are fully protected and stop checking details
  • Does not fix old comments, group posts, or what your friends repost
  • Still respects your friends list and friend count, which can leak patterns

Treat it as a starting preset, not a replacement for manual tuning.

8. Regular “Red Team” test: stalk yourself

Every few months:

  1. Log out or use a different browser.
  2. Go to your public profile URL.
  3. Check:
    • Photos
    • About sections
    • Friends suggestions
    • Old cover photos

Then:

  1. Log back in, use View As (public view).
  2. Anything that surprises you goes back to Only me or Friends.

This takes 5–10 minutes and catches things the step‑by‑step guides miss.

9. Slight disagreement on “just create a second profile”

Splitting into a “real” and a “public” account, like @chasseurdetoiles mentioned, can work, but you should know:

  • It technically goes against Facebook’s “real name / one account” rule.
  • Managing two identities is tiring and you will eventually cross‑post something in the wrong place.
  • If one account gets flagged, you may have headaches recovering the other.

A safer middle ground:

  • Keep one real account, locked down as described.
  • Create a very minimal public Page for work / portfolio / contact if you actually need public visibility.

That keeps your private and public faces separate while staying inside Facebook’s rules.

10. Reality check: what “fully locked” actually means

With all of this in place:

  • Strangers and casual snoopers will mostly see:
    • A neutral profile photo
    • Your name
    • Maybe a cover image
    • Very little else

But even with perfect settings:

  • Friends can screenshot, forward, or show your profile to others.
  • Facebook still has your data internally.
  • Anything you post can theoretically resurface.

So the mental model that keeps people safest is:

“Facebook is a controlled leak, not a vault.”

If something would seriously damage your safety or career, do not upload it at all, even to “Only me.” Use offline backups or encrypted storage instead.

Combine:

  • Tight audiences (Friends / Only me / Custom)
  • Hidden friends list
  • Aggressive use of Restricted
  • Tag review and occasional footprint audits

and you are about as “locked” as Facebook realistically allows, short of not using it.