Loading page
About this tool
30-point Facebook privacy audit — limit past posts, hide the friends list, fix tag review, off-Facebook activity, ad topics and login security.
This checklist audits the 30 Facebook settings that decide who finds your profile, what they can read on it, who can message you and how much off-platform data feeds your ad profile. It covers the Limit Past Posts bulk action, the friends-list audience, timeline and tag review, the search-engine link toggle, off-Meta activity, connected apps, location history and two-factor authentication, each ranked by how much exposure it removes. Choose a risk profile — job seeker, public figure, scam target or someone leaving an unsafe situation — and the scoring shifts to what matters for that case.
Open Facebook Privacy Settings Checklist on AltFTool — it loads instantly in your browser.
Provide your input — an image, text, or data.
Let the tool analyze or generate the result.
Review, refine, and reuse the output wherever you need it.
Limit Past Posts changes every old public post in one click — the checklist puts it above the settings that only affect one post.
Friends-list audience, album audiences and Messenger delivery live on the profile or in Messenger, not in the Settings menu.
A community page owner who must stay reachable is graded on message and security controls rather than on being hidden.
Settings and privacy > Settings > Privacy > Your activity > Limit who can see past posts. It changes every post previously shared as Public or Friends of friends to Friends only in one action. It cannot be undone in bulk — reversing it means editing posts one at a time — and it does not change photo album audiences or posts you were tagged in.
The control is on your profile, not in Settings: Profile > Friends > the pencil or three-dot menu > Edit privacy > set Friend list to Only me. This matters because a visible friends list is exactly what a profile-cloning scam needs to target everyone you know.
The tag-suggestion system was shut down in November 2021 and Meta said it deleted more than a billion facial-recognition templates. Facial recognition has since returned in narrower forms — detecting celeb-bait scam ads and verifying identity through a video selfie during account recovery — with availability differing by country, so check what your own account offers rather than assuming.
It is the record other websites and apps send Meta about what you did on them, used to target ads. In Accounts Centre you can see which businesses sent data, clear the history and disconnect future activity. Clearing without disconnecting only resets the record — it starts rebuilding immediately, so use both.