22 Tips to Protect Your Facebook Account from Hackers

Download Article

Learn tips for keeping your Facebook account safe and secure

Explore this Article

IN THIS ARTICLE

1Create a secure password.

2Make a password that’s just for Facebook.

3Safely store your passwords.

4Change your passwords often.

5Don't share your password.

6Use trusted computers.

7Make sure you log out of Facebook when you're done.

8Use Login Alerts to detect suspicious logins.

9Enable two-factor authentication.

10Check your login activity regularly.

11Look for suspicious activity in your emails from Facebook.

12Make your account private.

13Encrypt notification emails.

14Check that the site is authentic.

15Don't accept friend requests from people you don't know.

16Don't click suspicious links on Facebook.

17Review your payment history.

18Report suspicious activity.

19Block suspicious people

20Make sure you don't have malware.

21Update your software.

22Spot and report phishing scams.

+Show 19 more...

-Show less...

Other Sections

Expert Q&A

VideoWATCH NOW

Tips and Warnings

Related Articles

References

Article Summary

Download Article

ARTICLE

VIDEO

For many of us, Facebook is part of everyday life. It’s where we interact with friends and colleagues, follow our favorite celebrities, and stay on top of the latest news. Many of us see Facebook as an extension of ourselves, which is why having your Facebook account hacked can be more than just humiliating. A hacked Facebook account can damage your reputation, expose private information, or even cost you money. If you suspect that your Facebook account has been hacked, the first thing to do is change your password. This How.com.vn article teaches you tips and tricks for boosting the security of your Facebook account.

Things You Should Know

• There are plenty of things you can do to protect your Facebook account and prevent it from being hacked, like making a secure password.
• Use Facebook's security features to check your activity on the social media site and make sure there aren't unknown logins.
• Don't click links in emails that claim to be from Facebook and don't give away your login information if you're asked for it.

Steps

1

Create a secure password.

Download Article

1. 
   Choose a password that will be hard for hackers to guess. Your Facebook password should be difficult to guess, yet easy for you to remember. Avoid including your name, birthdate, pets, or common words in your password.

   • The longer the password, the more difficult it will be for others to crack. One way to create a strong password is to think of a long phrase or series of words that you can remember, but that nobody would ever guess.
   • Always include numbers, a mix of upper- and lower-case letters, and symbols in your passwords. Aim for at least 10 characters.
   • Try making an acronym out of a memorable sentence or song lyrics. For example, "I'm gonna take my horse to the old town road" could be iGTMhtthotR9! Who would guess that?
Advertisement

2

Make a password that’s just for Facebook.

Download Article

1. 
   Do not use your Facebook password on any other website or app. You should have a different password for every service you use. For example, let's say you use the same password for Facebook as you do for TikTok. If your TikTok is hacked, the hacker can also gain access to your Facebook account.

3

Safely store your passwords.

Download Article

1. 
   Use a password manager. As you create more strong and unique passwords, it will be difficult to remember them all. There are many good password managers available that will encrypt and safely store your passwords so you only have to remember one master password. Some popular options are LastPass, Dashlane, and 1password.

   • You might even have a password manager built into your operating system. For example, if you have a Mac, iPhone, or iPad, you can use the iCloud Keychain for free.
   • If you're using a browser that saves your passwords, such as Google Chrome, you'll be required to enter a master password to see them in plain text. In the case of Chrome, you'll have to enter your Google password. If it's Microsoft Edge and you're using Windows 10, you'll have to confirm your default sign-in password or PIN.
Advertisement

4

Change your passwords often.

Download Article

1. 
   Change your password once every 6 months. This goes for all your passwords, not just Facebook. Set a reminder on your calendar if it's difficult to remember.

5

Don't share your password.

Download Article

1. 
   Do not share your Facebook password with anyone. In fact, don’t share any of your passwords with anyone! Nobody from Facebook or any other service will ever request your password.
Advertisement

6

Use trusted computers.

Download Article

1. 
   Only log in on trusted computers. If you are using a computer that you don’t know or trust, avoid doing anything that requires you to enter your password. Hackers commonly use keyloggers on computer systems that record everything you type, including passwords.

   • If you must log in on a computer you don't trust, you can request a one-time password from Facebook in some regions as long as your phone number is already linked to your account. To do this, send a text message to 32665 (if you're not in the US, see this list for your number) containing the letters otp. As long as your mobile phone is linked to Facebook, you'll receive a 6-digit temporary passcode you can use in the "Password" blank to sign in.
   • If it’s not possible for you to use a one-time password and you absolutely must sign in, change your Facebook password as soon as you're back at your own computer, phone, or tablet.
   • Avoid using the “remember password” feature on computers other than your own. If you sign in to Facebook on a public computer (or even at a friend's house), you may see a “remember password” prompt that asks if you'd like to save the password. Choose the Not Now (or similar) option, or else other users of that computer can gain access to your account.

7

Make sure you log out of Facebook when you're done.

Download Article

1. 
   Log out of Facebook when not using your own computer. This is particularly important if you’re using a computer at a library or internet café, where many people you do not know will use the computer throughout the day.
Advertisement

8

Use Login Alerts to detect suspicious logins.

Download Article

1. 
   Set up Login Alerts. Login Alerts send you an alert (Facebook notification, email, and/or text message) when someone logs into your account from an unrecognized location. If you get a login alert and you weren't the one that logged in, click or tap the This wasn't me link to recover your account immediately. Here's how to set up Login Alerts:

   • On a computer:
     • Go to https://www.facebook.com/settings?tab=security.
     • Click Edit next to "Get alerts about unrecognized logins."
     • Choose how to receive notifications and click Save Changes.
   • On a phone or tablet:
     • Open the Facebook app and tap the menu (the three horizontal lines).
     • Scroll down and tap Settings & privacy.
     • Tap Settings.
     • Tap Security and Login.
     • Tap Get alerts about unrecognized logins.
     • Choose how you want to receive alerts.

9

Enable two-factor authentication.

Download Article

1. 
   Two-factor authentication makes it harder for hackers to log in. Two-factor authentication gives your account an extra level of security by requesting a security code when you log in from an unknown browser. You can choose to receive this code via SMS text message or using an authentication app like Google Authenticator. After setting up two-factor authentication, you'll be given options for recovering your account in case you lose access to your second device (your phone).

   • On a computer:
     • Go to https://www.facebook.com/settings?tab=security.
     • Click Edit next to "Use two-factor authentication."
     • Select Use Text Message and follow the instructions to receive codes via SMS (most common) and follow the on-screen instructions.
     • Select Use Authentication App to use an authentication app like Duo or Google Authenticator and follow the on-screen instructions.
   • Using a phone or tablet:
     • Open the Facebook app and tap the menu (the three horizontal lines).
     • Navigate to Settings & Privacy > Settings.
     • Tap Security and Login.
     • Tap Use two-factor authentication.
     • Tap Use Text Message and follow the instructions to receive codes via SMS (most common), and follow the on-screen instructions.
     • Tap Use Authentication App to use an authentication app like Duo or Google Authenticator, and follow the on-screen instructions.
   EXPERT TIP

   

   Brandon Phipps

   Technology Specialist

   Brandon Phipps is a Technology Specialist based in Bakersfield, CA. He is the owner of Second Star Technologies and specializes in Managed IT Services for small and mid-sized businesses in Bakersfield, CA. With over 23 years of experience, he offers expert cloud computing, cybersecurity, and network management solutions. Brandon is a committed community member and coach who leads and innovates in tech and sports coaching. His dedication to local businesses and communities is evident in his hands-on, tailored approach to IT solutions.

   

   Brandon Phipps
   Technology Specialist

   Enable two-factor authentication on all your digital accounts. That applies to all your personal accounts, business accounts, finances, client information, and productivity apps. Two-factor authentication protects your sensitive data from unauthorized parties and reduces the risk of security breaches.
Advertisement

10

Check your login activity regularly.

Download Article

1. 
   See where you're logged in (and log yourself out remotely). The “Where You’re Logged In” section tells you which devices are currently signed to your Facebook account. If you think someone is using your account, or that you left yourself logged in somewhere else (like at work or on a friend's computer), you can use it to sign yourself out remotely.

   • Using a computer:
     • Go to https://www.facebook.com/settings?tab=security. This shows you a list of currently signed-in locations near the top of the page.
     • Click See more to expand the list (if given the option).
     • To sign out of a session, click the three vertical dots and select Log Out. Or, if the session is not you (if you think you've been hacked), select Not You? instead and follow the on-screen instructions.
     • Click Log Out of All Sessions to sign out everywhere you're logged in.
   • Using a phone or tablet:
     • Open the Facebook app and tap the menu (the three horizontal lines).
     • Navigate to Settings & Privacy > Settings > Security and Login.
     • Locate the list of currently signed-in locations.
     • Tap See all if necessary.
     • To sign out of a location, tap the three vertical dots and select Log Out. Or, if you think you've been hacked, select Not You? and follow the on-screen instructions.
     • Repeat until you're signed out everywhere you want.

11

Look for suspicious activity in your emails from Facebook.

Download Article

1. 
   Check the list of recent emails from Facebook. If you accidentally deleted an email that Facebook sent you, or if your email account was hacked and you’re afraid that the hacker got into your Facebook account, you can see a list of recent messages sent by Facebook.

   • Using a computer:
     • Go to https://www.facebook.com/settings?tab=security.
     • Click View next to "See recent emails from Facebook". Security emails are on the first page—tap OTHER EMAILS to see different types of Facebook emails.
     • Click I didn't do this or Secure your account if necessary.
   • Using a phone or tablet:
     • Open the Facebook app and tap the menu (the three horizontal lines).
     • Navigate to Settings & Privacy > Settings > Security and Login.
     • Tap See recent emails from Facebook.
     • Tap I didn't do this or Secure your account if necessary.
Advertisement

12

Make your account private.

Download Article

1. 
   Limit who can see your posts. If you've never specifically chosen an audience for your Facebook posts, you may be sharing your information publicly. When posting to Facebook, you can click or tap the small drop-down menu above (mobile) or below (computer) the typing area to select an audience (Public, Friends, etc.). If you want to go back and limit your previous posts, here's how:

   • Using a computer:
     • Go to https://www.facebook.com/settings?tab=privacy.
     • Click Edit next to "Who can see your future posts?" to control your default posting privacy.
     • Click Limit Past Posts to change all public (or friends-of-friends) posts to friends-only.
     • Click Check a few important settings at the top of the page to run a privacy checkup for more settings to change.
   • Using a phone or tablet:
     • Navigate to Settings & Privacy > Settings > Privacy Settings.
     • Tap Who can see your future posts? to control your default posting privacy.
     • Tap Limit who can see past posts to change all public (or friends-of-friends) posts to friends-only.
     • Tap Check a few important settings at the top of the page to run a privacy checkup for more settings to change.
   • To see what your profile looks like to other people (computer or mobile), go to your profile, click or tap the three horizontal dots (…) near the top of the page, and then select View as.

13

Encrypt notification emails.

Download Article

1. 
   This advanced option protects your Facebook emails. Facebook gives you the option to have all notification emails to be encrypted before they are sent to you. This can only be done on Facebook's website (not the mobile app), and you'll need an OpenPGP key to get started. To do this, head over to https://www.facebook.com/settings?tab=security, scroll down and click Edit next to "Encrypted notification emails," paste your OpenPGP Key into the box, add a checkmark to the box, and then click Save Changes.

   • If you’re not sure how to get an OpenPGP key, there are several free web-based PGP key generators (such as https://pgptool.org/ and https://pgpkeygen.com/) that you can use to create one.
Advertisement

14

Check that the site is authentic.

Download Article

1. 
   Make sure you're logging in on the correct website. If you're using a web browser to access Facebook, make sure the address bar actually says www.facebook.com and not something like facebook.co, face.com, or facebook1.com, etc. Phishers often choose sites that you may accidentally type into your address bar when in a hurry.

   • Be especially careful when clicking links in email messages from Facebook. Scammers may send emails that look like they are from Facebook but are rogue sites that steal your data. If you click or tap a Facebook link in an email and you see any domain name that isn't "facebook.com," do not enter your password or any other personal info.

15

Don't accept friend requests from people you don't know.

Download Article

1. 
   Scammers can create fake accounts and friend people. Once they’ve friended you, they can spam your timeline, tag you in posts, send you malicious messages, and even target your friends.

   • If your birthday and location are viewable by your Facebook friends and you regularly update your whereabouts, scammers might be able to use your details and updates to crack your passwords or even break into your home when they know you’re away on vacation.
   • Be wary if you receive a friend request from someone you think you're already friends with. Scammers often mimic real people's profiles and try to make friends with their friends.
Advertisement

16

Don't click suspicious links on Facebook.

Download Article

1. 
   Click carefully. Your friends aren’t immune to spam. If a friend posts a suspicious link or “shocking video” or sends something strange in a message, don’t click it—even if it's from someone you know. If one of your Facebook friends clicks on a spam link, they could accidentally send it over to you.

   • This also goes for sketchy-looking websites, browser plug-ins and videos, and suspicious emails and notifications. If you ever receive an email asking for your password for any account that you have, do not respond. Reputable companies will never request your password over email.

17

Review your payment history.

Download Article

1. 
   Check your account purchases regularly. If you make purchases on Facebook, be sure to review your purchase history often. That way, if someone does manage to get into your account and spend money, you can seek help from Facebook’s Payments Support Center.

   • To see your payment history on a computer, visit https://secure.facebook.com/facebook_pay/payment_history.
   • If you're using a phone or tablet, tap the three horizontal lines or blue-and-white "f", tap Facebook Pay, and then scroll down to the "Payment History" section.
   • To review your payment history, go to “Settings” and then click on the “Payments” tab.
Advertisement

18

Report suspicious activity.

Download Article

1. 
   Report questionable posts or profiles on Facebook. How you report something will depend upon what you’re reporting.

   • To report a profile, go to the profile you want to report, click or tap the three horizontal dots (…) near the top, select Find Support or Report Profile, and follow the on-screen instructions.
   • To report a problematic post, navigate to the post, click or tap the three horizontal dots (…) near the top, select Find Support or Report Profile, and follow the on-screen instructions.
   • To report a message, open the message you'd like to report in Facebook (or Messenger on a phone or tablet), click the gear or tap the person's name, and select Something's Wrong. Follow the on-screen instructions.

19

Block suspicious people

Download Article

1. 
   If you think someone might be a hacker, block them. If someone is harassing you, sending you multiple repeated friend requests or suspicious messages, or trying to hack you, it's best to just block them. To block someone, click or tap the three dots at the top of their profile, select Block, and follow the on-screen instructions.

   • People won't be notified when they are blocked by you unless they try to view your account. Blocking people makes sure that they are removed from your friends list and trusted contacts, and also prevents them from harassing you.
Advertisement

20

Make sure you don't have malware.

Download Article

1. 
   Scan your computer for malware and viruses regularly. Malware may help hackers circumvent Facebook's security tools to get access to your account. From there, it can collect personal information, send status updates and messages that appear to be from you, or cover your account with ads that will crash your computer. There are a number of free anti-malware programs available online. Facebook recommends ESET and Trend Micro as free scanning tools.

   • Your computer may have malware on it if you have recently tried to watch a “shocking video” via a Facebook post; if you have visited a website claiming to offer special Facebook features; or if you have downloaded a browser add-on that claims to do the impossible (for example, allowing you to change the color of your Facebook profile).
   • PCs and Macs have their own free version of anti-malware, so scanning and getting rid of the bad files is easy!

21

Update your software.

Download Article

1. 
   Keeping your software up-to-date helps prevent security issues. In particular, ensure that whatever browser you are using is up to date. Facebook supports Firefox, Safari, Chrome, and Microsoft Edge.

   • Make sure your computer, phone, or tablet is running the latest operating system so that you have the most recent security updates installed.
Advertisement

22

Spot and report phishing scams.

Download Article

1. 
   Watch for suspicious messages that appear to be from Facebook. If you receive an email or Facebook message asking for your personal information, it could be a phishing attempt. Always report all Facebook-related phishing attempts to Facebook via email at [email protected]. To avoid getting “phished” (scammed), beware of the following:

   • Messages claiming to contain your password as an attachment.
   • Images or messages with links that don’t match what you see in your status bar when you hover over them.
   • Messages asking for your personal information, such as your password, credit card info, driver’s license, social security number, date of birth, etc.
   • Messages claiming that your account will be deleted or locked unless you act immediately.

Expert Q&A

Search

Add New Question

• Question

  What should I do if I think I've been hacked?

  

  Luigi Oppido
  Computer & Tech Specialist

  Luigi Oppido is the Owner and Operator of Pleasure Point Computers in Santa Cruz, California. Luigi has over 25 years of experience in general computer repair, data recovery, virus removal, and upgrades. He is also the host of the Computer Man Show! broadcasted on KSQD covering central California for over two years.

  

  Luigi Oppido

  Computer & Tech Specialist

  Expert Answer

  If you're worried you've been hacked, the best thing you can do is change your password.

  Thanks! We're glad this was helpful.
  Thank you for your feedback.
  If How.com.vn has helped you, please consider a small contribution to support us in helping more readers like you. We’re committed to providing the world with free how-to resources, and even $1 helps us in our mission.Support How.com.vn

  YesNo

  Not Helpful 0Helpful 5
• Question

  What if the hacker is really smart and hacks my address? I'm afraid I'm being stalked.

  

  R2_d2000

  Top Answerer

  If you feel your life is in danger, contact the police. The articles How to Check if You Are Under Surveillance, How to Recover a Hacked Facebook Account, How to Prevent Hacking, and How to Activate 2 Step Verification in Facebook should be able to provide some help.

  Thanks! We're glad this was helpful.
  Thank you for your feedback.
  If How.com.vn has helped you, please consider a small contribution to support us in helping more readers like you. We’re committed to providing the world with free how-to resources, and even $1 helps us in our mission.Support How.com.vn

  YesNo

  Not Helpful 0Helpful 9
• Question

  How do I set up an authentication code for Facebook?

  

  R2_d2000

  Top Answerer

  The How.com.vn article How to Activate 2 Step Verification in Facebook provides step-by-step directions with pictures to help you enable an authentication code for Facebook.

  Thanks! We're glad this was helpful.
  Thank you for your feedback.
  If How.com.vn has helped you, please consider a small contribution to support us in helping more readers like you. We’re committed to providing the world with free how-to resources, and even $1 helps us in our mission.Support How.com.vn

  YesNo

  Not Helpful 0Helpful 5

See more answers

Ask a Question

200 characters left

Include your email address to get a message when this question is answered.

Submit

Advertisement

Video

Read Video Transcript

Tips

• If you're worried your Facebook account has been hacked, change your Facebook password right away, and you can easily recover it.
  Thanks

  Helpful0Not Helpful0

Submit a Tip

All tip submissions are carefully reviewed before being published

Submit

Thanks for submitting a tip for review!

Advertisement

You Might Also Like

How to

Recover a Hacked Facebook Account

How to

Keep Safe on Facebook

How to

Change Your Facebook Password

Simple Steps to Activate 2FA on Facebook

How To Keep Your Cell Phone Safe From Hackers

How to

See Who Views Your Facebook Profile

How to

Find Out if You Have Been Restricted on Facebook

How to

Reveal a Fake Facebook Account

How to

Hide Your Profile on Facebook

How to

Hide Your Birthday on Facebook

How to

Not Show Up in Suggested Friends on Facebook

How to Remove Your Phone Number from Your Facebook Account

Easy Ways to Limit Who Can Contact You on Facebook

How to Make Facebook Private: Step-by-Step Guide

Advertisement