Step-by-step guide to hardening your Facebook account against hackers and unauthorised access.
Good to know
Taking a few minutes to secure your Facebook can prevent devastating account takeovers. Follow every step in this guide for maximum protection.
1. Enable Two-Factor Authentication (2FA)
Two-factor authentication is the single most important security measure you can enable on your Facebook account.
- Go to Settings → Security and Login → Two-Factor Authentication
- Choose your second factor: Authentication app (recommended), SMS, or Security Key
- Set up recovery codes and store them securely offline
- Consider using an authenticator app like Authy or Google Authenticator instead of SMS
2. Review and Remove Third-Party Apps
Over time, you may have granted dozens of apps and websites access to your Facebook account. Each one is a potential entry point for attackers.
- Go to Settings → Apps and Websites
- Review every active app carefully
- Remove any app you no longer use or don't recognise
- Be especially cautious of apps requesting access to your posts, friends list, or messages
- Check expired apps too — remove those as well
3. Check Your Login Alerts and Contacts
Your contact info is your lifeline if you ever lose access. Make sure it's current and secure.
- Go to Settings → General → Contact to verify your email and phone number
- Remove any old or compromised email addresses
- Enable login alerts under Security and Login → Get alerts about unrecognised logins
- Set up 3-5 Trusted Contacts who can help you recover your account if locked out
4. Review Active Sessions
- Go to Settings → Security and Login → Where You're Logged In
- Review every device and location listed
- Log out of any sessions you don't recognise
- Use "Log Out of All Sessions" if anything looks suspicious
5. Strengthen Your Password
- Use a unique password of at least 16 characters
- Never reuse your Facebook password on other sites
- Use a reputable password manager to generate and store it
- Change your password immediately if you suspect any compromise
- Avoid personal information like birthdays or pet names
6. Configure Privacy and Security Settings
- Set your profile visibility to Friends Only under Privacy settings
- Disable face recognition under Settings → Face Recognition
- Limit who can send you friend requests to "Friends of Friends"
- Review your Activity Log regularly for suspicious actions
- Disable location history under Settings → Location
- Review Page and Group admin roles if applicable
Important
If you suspect your account has already been compromised, read our companion guide: How to Tell If Your Facebook Has Been Compromised.
Was this guide helpful?
Know someone who needs this? Send them the guide.
JD
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers