- What "locking" your profile means
- The manual settings, for when Profile Lock isn't available
- A worked example
- What locking your profile does not do
- Groups, tags and the settings people forget
- Where this fits into a wider privacy habit
- A quick checklist before you call it done
- Frequently asked questions
- Further reading
The short version: locking your Facebook profile stops strangers seeing your posts, photos and friend list, but it does not stop Facebook using your data, does not stop screenshots, and does not stop someone you already know from passing your stuff on. Use Facebook's own Profile Lock feature if you're eligible, then back it up with manual privacy settings, because the lock alone leaves gaps most people never check.
What "locking" your profile means
Facebook introduced a literal Profile Lock feature a few years ago, aimed mainly at users in regions where privacy risk is higher, but it has rolled out more widely since. When it's switched on, people who aren't your friends can't see anything beyond your profile picture and name. No cover photo, no posts, no photos, no friends list, no "About" section. It's the closest thing Facebook has to a single switch.
The catch is that not every account has access to it. It depends on your region, your account type and sometimes your app version. If you don't see it under Settings, you're not missing a trick, Facebook just hasn't turned it on for your account yet. In that case you need the manual route, which takes longer but does the same job.
How to turn on Profile Lock, if you have it
- Open the Facebook app and go to your profile
- Tap the three dots menu under your cover photo
- Look for "Lock Profile"
- Confirm, and Facebook will show you a preview of what strangers will now see
That preview step matters. Check it rather than clicking through. I've seen people assume the lock covers everything, then find their cover photo was still public because they'd set it to "Public" manually before locking, and the lock doesn't always override an individually set permission on older photos.
The manual settings, for when Profile Lock isn't available
If you don't have the lock feature, you need to go through Settings and Privacy, then Privacy, and work through each section one at a time. It takes about 15 minutes done, not the two minutes most guides suggest.
- Set "Who can see your future posts" to Friends, not Public or Friends of Friends
- Go into "Limit Past Posts" and apply it, this retroactively changes old public posts to Friends only
- Set "Who can see your friends list" to Only Me or Friends, never Public
- Turn off "Who can send you friend requests" from Everyone, switch to Friends of Friends
- Review "Who can look you up using the email address/phone number you provided" and restrict both
- Switch off "Do you want search engines outside of Facebook to link to your profile"
That last one is the one people skip, and it's the reason a stranger can find your profile through Google before they've even searched Facebook.
A worked example
Say you run a small bakery and you post photos of your cakes on your personal profile rather than a business page, because it gets better engagement. Your profile is public by default, because you never changed it when you set it up in 2019. A customer tags you, their friend sees it, clicks through, and suddenly a stranger is scrolling through seven years of personal photos, your kids' school event, a holiday album, your friends list, all because of one cake photo.
If that's you, the fix isn't just locking the profile. It's separating business from personal. Create a Facebook Page for the bakery, keep your personal profile locked and Friends-only, and post the cake photos there instead. You get the engagement without the exposure.
What locking your profile does not do
This is the part most "how to lock Facebook" articles gloss over. Locking your profile does not stop Facebook itself from collecting your activity, location and ad data, that's a separate settings menu entirely. It does not stop a friend from screenshotting your posts and sending them to someone outside your network. It does not stop someone creating a fake account, sending a friend request that looks like someone you know, and getting accepted. Profile locks only work against strangers browsing directly. They do nothing against someone already let in.
The uncomfortable bit nobody likes admitting: most privacy leaks on Facebook come from people you accepted as friends, not strangers who found you. A locked profile protects you from the opportunist, not the person who already has access and decides to misuse it. If you're worried about a specific person, blocking them directly is more effective than any general privacy setting.
Groups, tags and the settings people forget
Your profile can be locked tight and still leak through group activity. If you're in public Facebook groups, your comments there can be visible to anyone, including non-members, depending on the group's settings. Check "Who can see what others post on your profile" and "Review posts you're tagged in before they appear" too, both under the Timeline and Tagging section. Without that second one, a friend can tag you in something and it appears on your profile before you've had a chance to approve it, bypassing your own privacy settings entirely.
If unwanted group adds are part of what's driving you to lock things down in the first place, it's worth reading how to block a group from adding you on Facebook, because that's a separate setting from profile privacy and gets missed constantly.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
Where this fits into a wider privacy habit
Facebook is rarely the only platform people worry about. If you're locking down Facebook, it's worth doing the same audit on Instagram, since the overlap in followers and friends is usually high. I'd point you towards hiding followers on Instagram for what's possible there versus what people assume is possible, and who can see mentions in a story if tagging is a concern on that platform too. The principle is the same across all of them: platforms give you the illusion of a single privacy switch, but the real protection comes from going through each setting individually.
If you manage a business page alongside your personal profile and you're not sure where the lines should sit between the two, that's exactly the kind of practical audit an AI consultant for small business can walk through with you in an hour, rather than you guessing at settings menus for an afternoon.
A quick checklist before you call it done
- Profile Lock turned on, if available, and previewed
- Future posts set to Friends
- Past posts limited
- Friends list hidden from Public
- Friend requests restricted to Friends of Friends
- Search engine linking switched off
- Tag review turned on
- Business content moved to a Page, not your personal profile
Go through that list once, rather than trusting one toggle to do it all.
If you want the full set, start at the Facebook Help: 80 Guides to Pages, Groups, Ads, Stories and Fixes.
Frequently asked questions
Does locking my Facebook profile stop people from finding me in search?
It stops most profile content showing, but you also need to switch off the separate setting that allows search engines outside Facebook to link to your profile, otherwise a Google search can still surface your name and photo.
Can someone still message me if my profile is locked?
Yes, locking your profile is about visibility of posts and photos, not messaging permissions. Check your separate Messenger and message request settings if you want to restrict who can contact you.
Will locking my profile remove me from old tagged photos?
No, it changes who can see content on your own profile but doesn't retroactively remove tags from other people's posts. You'd need to review and untag those individually.
Is Profile Lock available to everyone on Facebook?
Not yet, it depends on your region and account. If you don't see the option under your profile menu, use the manual privacy settings instead, they achieve a similar result.
