Facebook privacy settings: what to change, where it is, and what it will not stop

Data removal. Updated 2026-09-13. About 6 minutes to read.

In How people find and contact you, set email and phone lookup and your friends list to Only me and turn off search engine linking, then run Limit past posts.

Facebook's defaults favour being found. Your friends list is public by default, your profile picture and cover photo are always public, and lookup by email or phone number is often left open. Strangers, scammers and scrapers use exactly those gaps to map who you are, who you know and where you live.

The paths below were checked in September 2026 on a computer: click your profile picture, then Settings and privacy, then Settings. The mobile app uses the same names under Menu, then Settings and privacy. Meta moves things around, so if a label has shifted, type it into the search box at the top of Settings.

One honest note before you start. These settings control what other people see. They do not stop Meta collecting data, and in July 2026 Meta removed one of the few controls that limited off-platform tracking. That section is at the end.

Start by seeing your profile as a stranger does

  1. Open your profile, click the three dot button under your cover photo and choose View As. This shows the public version of your profile.
  2. Note everything visible: friends list, workplace, school, hometown, relationship, birthday, photos and old posts.
  3. Run Privacy Checkup from Settings and privacy. It walks through who can see what you share, how people find you, account security and ad preferences in one pass.
  4. Come back to View As after the changes below and confirm they took effect.

Stop strangers finding you by search, email or phone

All of these live in Settings, under Audience and visibility, then How people find and contact you.

  1. Who can send you friend requests: set to Friends of friends.
  2. Who can see your friends list: set to Only me. Your friends still control whether your friendship shows on their own profiles.
  3. Who can look you up using the email address you provided: set to Only me.
  4. Who can look you up using the phone number you provided: set to Only me.
  5. Do you want search engines outside of Facebook to link to your profile: turn it off.

Turning off search engine linking stops new links to your profile, but already indexed results can take weeks to drop, and public posts in groups, Pages and comments can still appear in Google. In 2021, a scraped set of about 533 million Facebook users' phone numbers circulated publicly, so lookup settings cannot unpublish what was already harvested.

Lock down profile details one field at a time

Go to Audience and visibility, then Profile details, or edit the About section of your profile directly. Each field has its own audience selector.

  • Mobile number and email: Only me. Friends do not need them from Facebook.
  • Birthday: show day and month to Friends if you like the reminders, but set the birth year to Only me. A full date of birth is an identity verification answer.
  • Current city, hometown and workplace: Friends or Only me. Together they narrow you to one person.
  • Relationship and family members: Only me. Relatives listed here feed impersonation scams aimed at your family.
  • Your name, current profile picture and cover photo cannot be hidden, so choose images that do not show your house, car plates, children's school uniforms or your workplace badge.

Make old posts private in one move

  1. Go to Settings, then Posts.
  2. Next to Limit who can see past posts, click Limit past posts, then confirm. Posts you shared publicly or with friends of friends change to Friends.
  3. On the same page, set Who can see your future posts to Friends.
  4. Open Activity log from your profile menu and review photos and posts you are tagged in, removing tags you do not want.

Limit past posts cannot be undone with one click. It also does not change posts shared with a custom audience, and people tagged in a post, plus their friends, may still see it.

Control tagging so other people cannot publish you

These settings control your profile only. A post you are tagged in still appears on the poster's profile, in search and in other people's feeds. To detach yourself, open the post and remove the tag.

  1. Go to Settings, then Profile and tagging.
  2. Turn on Review posts you are tagged in before the post appears on your profile.
  3. Turn on Review tags people add to your posts before the tags appear on Facebook.
  4. Set who can see posts you are tagged in on your profile to Friends or Only me.

Secure the account itself

  1. Go to Settings, then Accounts Center, then Password and security, then Two-factor authentication. Choose an authentication app or a security key rather than text messages.
  2. In the same section open Where you are logged in and log out of any device or location you do not recognise.
  3. Turn on login alerts so you hear about new sign ins immediately.
  4. Go to Settings, then Apps and websites, and remove apps and games you no longer use. Old quiz apps and logins are a common data leak.

What Meta still collects, and the July 2026 change

Until mid 2026, a setting called Your activity off Meta technologies let you disconnect the browsing and purchase data that other websites and apps send to Meta. Meta announced in June 2026 that it would discontinue that setting in the US and a number of other countries from July.

The replacement is Activity from other businesses, found in Accounts Center, then Your information and permissions. It only controls whether Meta uses that data to personalise ads and other content such as your feed. According to Meta's own help page, businesses may still send your activity to Meta regardless of your choice. Turn it off anyway, because it limits how that data is used.

To reduce what reaches Meta in the first place, stop using Log in with Facebook on other sites, use a browser that blocks third party trackers, and consider using Facebook in a browser rather than the app. To see what Meta already holds, use Download your information in the same Accounts Center section.

Frequently asked questions

How do I hide my friends list on Facebook?

Go to Settings and privacy, Settings, then How people find and contact you, and set Who can see your friends list to Only me. Mutual friendships can still appear on your friends' profiles if their lists are public, so this reduces exposure rather than erasing it.

Does a private profile hide my profile picture and cover photo?

No. Your name, current profile picture and cover photo are always public on Facebook. Older profile pictures sit in an album whose audience you can change, but the current ones cannot be hidden.

How do I stop my Facebook profile appearing in Google?

In How people find and contact you, turn off search engines outside of Facebook linking to your profile. Expect existing results to fade over several weeks as search engines recrawl. Public comments and group posts can still appear.

Is the Lock profile feature available in my country?

Facebook offers Lock profile only in some countries, such as India. If you do not see it in your profile menu, it is not available to you, and the settings in this guide are the closest equivalent.

Should I deactivate or delete my account instead?

Deactivation hides your profile but keeps everything, and you can come back by logging in. Deletion is permanent after a grace period of 30 days, during which logging in cancels it. Download your information first if you want a copy.

Tools that help

Related guides

Sources