6 Facebook privacy settings you need to check right now

When was the last time you went through your Facebook account’s privacy settings? It’s a good idea to do this regularly to ensure only certain apps and services have access to the data you want to share. 

Facebook, after all, is one of the largest online hoarders of our personal data. Because of that, our private info is a prime target for would-be bad actors. Accessing your information doesn’t always mean gaining direct access to your account due to a poor password. Instead, as we learned with the Cambridge Analytica scandal, approving a rogue app can do just as much damage. 

With that in mind, take a few minutes to secure your Facebook account. I recommend going through the steps outlined below on a computer and not your phone. It makes it easier to read all the pertinent information while you make adjustments.

Even if you’ve recently spent time securing your account, you should occasionally visit the Facebook Settings page and look things over once again. Odds are, new settings have been added and older settings have been moved. Keep reading to learn how to set a strong password, limit how others can search for you and prevent Facebook from keeping your location history.

Use a strong password plus two-factor authentication 

The first things you should do to secure your Facebook account is to create a strong password and enable two-factor authentication. This might seem obvious, but the importance can’t be overstated. You’ll also want make sure you’re not using the same password for crucial accounts like your banking app. Use a password manager to help create and, most importantly, remember your unique passwords (these are our top picks for best password manager). Go to the Security page and change your password.

Once you have a new password, turn on two-factor authentication. With 2FA enabled, you’ll need to enter your secure password and a randomly generated code whenever you sign in to your account. (You really should be using 2FA on every account and service that supports it.)

Most password managers have the ability to store your two-factor authentication codes, as well. However, you can always use Google Authenticator to store and provide access to your codes if needed.

Go through Privacy Settings and Tools

Facebook has a dedicated Privacy section for your account. In this section, you can do things like set the default privacy setting for future posts, control who can send you friend requests and decide what information people can use to search for your account.

Go through each and every option on the privacy settings and tools page and adjust each one to your liking. I suggest setting your future posts to “Friends” and limiting the phone number and email address search options to “Friends” or “Only Me” to ensure that anyone with just a piece of your personal info can’t find your account.

Remove past posts from the public eye

The way we use social networks has changed quite a bit, especially as we become more aware of just how Facebook, and those on Facebook, can use our personal information.

Thankfully, you can limit your past posts from being visible anyone who might stumble across your profile.

Go to the Privacy section and find Limit the audience for posts you’ve shared with friends of friends or Public? and click on it. It will then turn into an option labeled Limit The Audience for Old Posts on Your Timeline. Next, click the button labeled Limit Last Posts. Anything you’ve ever shared publicly or with friends of friends will be changed to being shared only with friends, thus limiting who can see it.

It’s an all or nothing setting. Meaning, you can’t pick and choose which posts you want to change via this setting. If you want to do that, you’ll have to manually go through your timeline and make those changes individually.

Audit devices with access to your account

Over the years, we’ve all signed into our Facebook accounts on different phones, computers, tablets and various other devices. Facebook keeps a log of the devices that have access to your account, and makes it easy to revoke access to a rogue device or one you forgot to log out of.

View a list of all those devices under the Where You’re Logged In section of the Security and Login page. If you have several devices, click on See More to view the entire list. To remove a device from the list, click on the three-dot icon to the right of the device’s name and then Log Out. You’ll be asked whether or not you want all posts that came from that device to be removed from your account as well; a convenient feature should someone have gained access to your account and posted without your permission.

Alternatively, you can sign out of every device linked to your account by clicking See More > Log Out Of All Sessions at the bottom of the list. I found a couple of devices from 2012 still had access to my account while writing this article — yikes. I logged out of all devices to start with a clean slate as a result. The few seconds I’ll spend logging back in each time I use a device that was revoked is well worth the peace of mind.

Don’t forget to look through apps with access

In that same vein, we’ve all granted countless apps access to our Facebook account. Over time, some apps are abandoned by developers and ultimately become a security risk. Should someone gain access to the app’s database of users, they could — in theory — gain access to some features of your Facebook account.

Visit the Apps and Websites page to view the Active apps that have access to your account. Click the check box next to any apps you want to remove, followed by the Remove button.

You should also remove any really old apps whose access to your account has expired by clicking on the Expired tab at the top of the page.

Turn off, delete Location History on your phone

Facebook uses its access to location data from your phone to create a map of your location history. You can delete your location history here, or if you’d rather Facebook not store your location history at all, you can turn off location history on that same page. 

On an Android phone, open the Facebook app and then tap on the three-line icon. Under Settings & Privacy select Privacy Shortcuts followed by Manage your location settings on the Privacy card. Next, select Location History > View your Location History and enter your account password when asked. Finally, tap on the three-dot icon in the top-right corner and select Delete all Location History. 

The process is similar on an iPhone ($899 at Amazon). Open the Facebook app and tap on the three-line icon, then Settings & Privacy then select Privacy Shortcuts followed by Manage your location settings on the Privacy card. Select Location History > View your Location History and enter your account password when asked. Finally, tap on the three-dot icon in the top-right corner and select Delete all Location History. 

Not sure you even want to use Facebook anymore? You can delete your account, but keep in mind it takes some planning on your part. If you just can’t get away from Facebook, for whatever reason, here are some tips to keep your data secure.

Now playing:
Watch this:

Is Facebook spying on you?

1:39