When the President of the United States warns schoolchildren to watch what they say and do on Facebook, you know that we've got a problem...and it's not one limited to the U.S.'s borders, either. People everywhere are mindlessly over-sharing on the world's largest social network, without a second thought as to who's reading their posts or what effect it could have on them further down the road. For example, did you know that 30% of today's employers are using Facebook to vet potential employees prior to hiring? In today's tough economy, the question of whether to post those embarrassing party pics could now cost you a paycheck in addition to a reputation. (Keep that in mind when tagging your friends' photos, too, won't you?)
But what can be done? It's not like you can just quit Facebook, right? No - and you don't have to either. You just need to take a few precautions.
Unbeknownst to most mainstream Facebook users, the social network actually offers a slew of privacy controls and security features which can help you batten down the hatches, so to speak. If used properly, you'll never have to worry about whether you should friend the boss and your mom. You can friend anyone you want while comfortable in the knowledge that not everyone gets to see everything you post.
The problem in implementing these privacy options is that they're just too confusing for most non-tech savvy people to handle. And often, folks don't want to bother to take the time to learn. To simplify the process, we're offering five easy steps you can take today to help make your Facebook experience safer, more secure, and more private.
Yes, it will take some time, especially if you're connected to a couple hundred friends already. But this step, while not the quickest, is fairly simple. And it will be one of the most useful things you can do on Facebook.
Friend lists, like they sound, are lists for categorizing your friends into various groups. The nice thing about this feature is that once you set these lists up, you won't have to do it again. We suggest that you put your work colleagues and professional acquaintances into a friend list designated "work," personal friends you're not very close with into a list called "Acquaintances," and people you're related to into a list called "Family." Those three main categories will separate out the groups of "friends" who you may want to hide some information from.
To create a friend list, click on "Friends" at the top of the Facebook homepage. In the left-hand column, click "Friends" again under the "Lists" section. Now you'll see a button at the top that says "Create New List". Click it. In the pop-up that appears, you can name your list and pick members. If you've ever shared an application with your friends, the process of doing this will be very familiar.
When you've finished making lists, you'll be able to use them when selecting who can see what (or who can't!) when configuring the security settings described below.

At the top right of Facebook, there's a menu that many people probably ignore: "Settings." But this menu is now going to become your best friend. To get started, hover your mouse over the Settings menu and click "Privacy Settings" from the list that appears. On the next page, click "Profile." This takes you to a page where you can configure who gets to see certain information on your profile.
Before making changes, think carefully about the sorts of things you want public and the things you want private. Should "everyone" get to see photos you're tagged in? Or would you like to limit this only to those you've specifically chosen as Facebook friends?
Underneath each section on this page (basic info, personal info, status, etc.), you can designate who gets to see that particular bit of information. For anyone not using custom lists (see step 1), the best thing to enter here is "Only Friends." Anything else opens up your profile information to people you may or may not know. For example, choosing "Everyone" makes that info public, "Friends of Friends" lets your friends' friends see it, "My Networks and Friends" opens up your info to anyone in your networks - that means anyone in your city, your high school, your college, a professional organization you listed, etc.
You can also block certain groups from seeing these sections, too. On any item that offers an "Edit Custom Settings" option, you can click that link to display a pop-up box where you can choose people or lists to block (see where it says "Except these people"). If you haven't made custom lists as explained in step 1 above, you can enter individual names here instead. (Sorry, mom, dad, boss - this is where you get blocked.)

Did you list your address and phone number on Facebook? While that's a handy feature, you may not want everyone you friended to have this information. To access this configuration page, you follow the same steps as above in step 2 to display the Profile Privacy page. You'll notice that the page has two tabs at the top - click on the one that reads "Contact information."
As previously described above, you can again use the drop-down lists provided to designate who gets to see what and/or block certain people or lists from viewing this information. The sections on this page include "IM Screen Name," "Mobile Phone," "Other Phone," "Current Address," "Website," and your email.

Sick of getting friend requests from old high school pals? While for some the beauty of Facebook is that it lets you reconnect with everyone you ever knew throughout your life, others find this intrusive and annoying. You're not friends with any of these people anymore for a reason, right?
As it turns out, you can still enjoy Facebook without some folks ever knowing or finding you thanks to the search privacy settings.
Click on the "Settings" menu on Facebook's homepage and then click "Search" on the following page. You'll be taken to a Search Privacy page where you can specify who gets to find you on Facebook. Want to be wide open? Change the "Search Visibility" drop-down box to "Everyone." Want to keep it a little more limited? Select "My Networks and Friends," "Friends of Friends," or "My Networks and Friends of Friends" instead. Don't want anyone finding you on Facebook? Change it to "Only Friends." That means only the people who you've already friended can find you in a Facebook search.
On this page, you can also configure what information displays when your info is returned as a search result (e.g. your profile picture, your friend list, etc.). In addition, you can check and uncheck the boxes for network-based searches too. For example, if you don't want anyone from high school to find you, uncheck the box next to "people in high school networks."

Remember when we told you about what Facebook quizzes know about you? Using Facebook's default settings, you're unknowingly sharing a plethora of personal information (and your friends' info too!) with various Facebook applications and the developers who created them. The problem is so bad that the ACLU recently created their own Facebook Quiz to demonstrate how much information an app has access to.
It's time to take back control! From the Facebook homepage, hover your mouse over the "Settings" menu and choose "Privacy Settings" from the drop-down list. On the next page, click "Applications" then click the tab that reads "Settings" which is next to the "Overview" tab. (Oh, and if you want to really be freaked out, read that overview!)
On this page, you can check and uncheck boxes next to your personal information (picture, education history, wall, religious views, etc.). This controls what the applications your friends are using can see about you. Yes, your friends' apps can see your personal info if you don't make this change! Believe it or not, you don't have the same control over your own apps. The best you can do is head over to the Applications page and delete the apps you're not using anymore. (Use the "X" to remove them.) You see, once you authorize an application, you're telling it that it's OK to access any information associated with your account that it requires to work. While some developers may only pull what's actually required, many others just pull in everything they can. Scary, isn't it?

While this is by no means a comprehensive guide to Facebook security and privacy, these five steps can help you get started in creating a safer, more secure, and more private environment on the social network.
However, if you choose not to take any precautions, then you'll only have yourself to blame when an errant wall post or naughty photo makes its way online and straight into Grandma's News Feed, or worse, your boss's. These days, it's better to be safe than sorry, so go ahead and delve into those settings!
Note to readers: We recently came across another invaluable resource for those interested in Facebook privacy. Check out MakeUseOf.com's "10 Solid Tips to Safeguard Your Facebook Privacy" for even more information on this subject.
Comments
Subscribe to comments for this post OR Subscribe to comments for all ReadWriteWeb posts
I've been wondering about friend lists for a while and have some questions. Can your friends see your lists? Can they see who's on each list? Do they have to agree with how you label them? (I ask this because I used to get emails requesting that I confirm that so-and-so and I went to high school together for example.)
I would like to use friend lists but I don't really want my friends to know how I label them. It would make my "people I don't like" list VERY awkward!
This is a great article. Thank you.
@Rose: To answer your questions:
No, No, and No.
I used to have very lax settings but was "private" and "only friends" everywhere.
I recently made most things "only me" and rechecked it and even ran that ACLU quiz.
Its pulling up things that were supposed to be "only me".
So if you used to have different settings and changed them is it even effective?
Okay, so I have three lists: Work, Acquaintances, Family. How does one do anything meaningful with that?
Under Privacy Profile, your example in 2) to edit custom settings works only under the Contact Information tab, but nothing under the Basic tab provides any way to associate permissions with lists, on my account anyway, no matter where or how deeply I drill down. Ditto for the Search Profile.
What if I want Work to see my Work info only, but I want Family to see everything, and Acquaintances should see everything except Personal info?
And what if I want a selected post to be viewable by one group only? No way to do that either.
Going to a particular list is no better, their edit screens don't provide any options to set permissions either.
It sure seems like the only thing I can do with lists is have lists!
Oops. I see now that I overlooked a few things and should not have posted the above comment. I apologize for blurting out before triple-checking my facts.
@Sarah, Thanks for the info!
I've taken the alternative route by creating two Facebook accounts: one is hidden from search and indexing while the other is public and open, much like a FriendFeed profile.
While it's not as sleek as the method noted in the above post, it *does* help me keep things separated.
Great post, Sarah! I've been noticing more and more people moving to more private profiles and honestly, some part of me wonders why they need to, if they have nothing to hide? Would making a profile private send that kind of message to potential employers checking you out?
Obama should read this, he might just change his mindset about Facebook!!
Is there anyway to disable the function, so that my friends are suggested to others as friends, because they are connected with me?
do we want to live in a world where we have to 'hide'?! be proud of who you are and the way you live. ;~)
And that's just the top of the iceberg. More information about what API authentication allows here: http://pjf.id.au/blog/?position=590
Birger
@Sarah:
I'm actually the author of the ACLU quiz above - thanks for linking to it, and for a great article on Facebook and privacy!
Unfortunately, as you pointed out, the privacy settings are complex even if you know they're there - and many users don't. That's why we are trying to work with Facebook to give users stronger privacy by default - so that you know what you're sharing and who you're sharing it with, instead of finding out after the fact that you really should have unchecked that box on that page that you didn't know existed until too late...
If you'd like to support our efforts, we encourage you to sign our online petition at http://j.mp/15xzdD.
Thanks!
~ Chris
@jdp:
There are two separate privacy concerns with apps:
1) If you personally run any app, like our (ACLU) quiz, that app has access to almost all of the information in your profile, on your wall, and so forth. Currently, there is NO privacy setting that limits what the apps you choose to run can access - every app you run has access to almost everything (contact info being one of the few exceptions).
2) If your friend runs an app, like our quiz, that app has access to your information based on your "application privacy settings" (see step 5 above). You can opt out, but (as Sarah said) if you don't the default is that your friends' apps have access to most of your information.
Facebook has recently committed to addressing #1 by requiring apps to declare what kind of information they will collect and allowing users to opt out of sharing specific bits of information with the apps they run (although they haven't implemented this yet).
Unfortunately, they haven't fully addressed #2 at this point. They have promised to make it more transparent to your friend if her app will access your information, but they haven't announced any plans to change the current default settings in order to give you yourself better control over your own information.
That's why we are still working with Facebook to encourage them to provide stronger privacy by default (for more info, see comment above).
Cheers,
~ Chris
Thanks for sharing the details, its really very wonderful for the facebook users. I am also a facebook user & i hope almost persons have a facebook account, so i just would to say you thanks to help us out for safety & privacy of our own account..
Safety is a key issue no one should overlook. Be very careful with your private information and always look for the best ways to be safe! If you don't understand where your information is going research it or avoid putting it. Great ideas or comments do not need an address or phone number fortunately :)
Sarah,
Great post. And thanks to the NorCal ACLU for the app. The eye opener was the info it was able to show about my friends. I was unknowingly exposing them.
In addition to the personal security theme, I've wondered whether this type of education and making privacy settings clearer and easier may not be welcomed by Facebook because it takes away advertising advantage. That is, in the general Web, we retain anonymity from companies gathering information about our actions. As a closed system where we have signed in, Facebook and advertisers know who we are and what we are doing.
Your thoughts?
-Art
Sarah - nice piece like always. The one issue I have with Facebook is, even with lists and privacy settings fine tuned, it posts / photos I'm tagged in shows up in my news feed. It's frustrating, since I've spent time tweaking as much as possible and FINALLY found a work around.
As much as I want to back Facebook's various options, I can't, until they tighten the rudimentary settings that are so basic but Facebook just doesn't get right. :(
Thanks you for consistently providing useful information and helpful tips on how to make our internet presence more secure. While, like you said, the tips you have given are nowhere close to a comprehensive guide on how to make yourself secure on Facebook, it provides great tips on how to guard your identity and protect yourself from third-party application developers.
Hey if you are pissed off with Facebook and looking for some change, then I would suggest you to visit: www.desimartini.com , this site is totally awesome.
Thank you for the wonderful tips. These past few weeks, I've been busy with facebook applications that I forgot everything about the importance of privacy.. Anyway, thanks for sharing the nice article.
I have been using this feature .. as most of the time . i have been getting too many frnds request .. and I dnt have the fear of getting calls and my showing up my address .. its better not to mention the full address .. and ur good frnds always have ur number abd they always know where u r putting up .. its better to give it in a message rather then displaying it on the profile ...
:)
Best,
Daina
These are all fine and good recommendations. Of course until some new feature is released with default 'unsecure' settings and you are hosed again. LOL. Don't put anything on Facebook you wouldn't want the world to see. That's the best advice you can give.
Helpful if you want to protect your information
Very interesting to note as I continue to mull over the whole privacy vs. social networking debate for myself and my clients.
Point of information: yes, quitting Facebook is completely possible, feasible, normal, and nondisruptive to one's life. I did it, friends of mine did it, and the results were overwhelmingly positive: less time wasted, less unwanted gossip, and less paranoia.
I think Facebook should set up privacy choices such as: 1) Maximum Exposure Level for those that are musicians, sales people, etc, 2) Medium Level Exposure for others that don't want the whole world to be able to find them, and then 3) MAXIMUM Privacy Level, where no one can find you unless you request them to see your site and info. I set up Facebook to share photo albums with existing friends and family, horrified that no matter what I did in the cumbersome privacy settings, my photo was still up there and name could be found by others via "mutual friends" etc. Also even after setting up Facebook Wall to Custom, specifically blocking each and all my friends, they could still bring up all the existing wall comments that were up there by other friends which I felt should be private between one friend and myself. Facebook programmers assumed that everyone wants maximum exposure and the defaults are for such, and it's almost embarrassing to see how no one knows how to block their personal information - AS the DEFAULT is for everything to show. I was a fashion model that travelled internationally, stalked by weirdos for decades, some jailed for stalking now, and hoped Facebook would be a site that would be private and could be just for me and my friends. I found using it this last week for first time that it is a perfect site for stalkers, busy bodies, nosey neighbors, enemies from high school, and a complete breach of security and privacy. I couldn't believe how hard it was to block each of my friends from seeing other friends, and no way could I block the announcement that we had So-n-So as a MUTUAL FRIEND. Very disappointed - it's like Facebook thought everyone wanted to try to find everyone they may have crossed paths with in life, when there are people that you do not want to have be able to find you. I had hoped that Facebook would allow people to just connect with friends and family they already know, and share photos and such, but it doesn't allow for such privacy as an option. I'm completely disappointed and have to look for another service instead.
This is a great post with some easy to follow suggestions. I definitely recommend segmenting your friends as over time you forget who you have added as friends and you certainly don't want to post something you'd regret someone else seeing.
Very impressive your tips, I 'll follow and ask others to do so, If someone still remember me pl ...........
Not Judy; Joe
i will put into practice this trips. thanks for all. i hope it will be useful
mantolama