How-to: manage your Facebook privacy settings with three simple lists
I used to love Facebook. I was in law school at Wisconsin when it launched, and everyone I knew on the site was basically a peer -- people who I'd known well or at least met in person at some point. Then... I graduated. Suddenly having a Facebook account full of pictures from blurry nights in Madison and Pulitzer Prize-caliber dirty jokes from my friends wasn't so awesome anymore -- especially once I started working for Engadget and lots and lots of people I didn't actually know (or, somewhat even worse, only knew professionally) started looking at my personal page. So I needed a system -- a way to still use Facebook to share personal stuff with friends, professional stuff with colleagues, and awesome stuff with everyone, all without blurring any lines or accidentally sharing too much with people I don't know.
Luckily, it's not so hard to do -- you just have to make effective use of a Facebook feature called Lists. By grouping all your friends into lists you can make sure you're sharing the right information with the right people -- pictures from last night's epic party with your actual friends, sanitized vacation photos with co-workers, almost nothing with strangers. But just making a bunch of random lists won't work -- you need a plan, and we've got one for you that involves making just three lists to solve all your Facebook privacy worries. How? Read on for step-by-step instructions.
Step one is the easiest step -- you just need to make the lists. Don't worry about putting people in them yet, we'll do that in a later step. To make a list, first hit the Account menu in the upper right, and select "Edit Friends" as shown above.
That'll take you to a large list of your friends, and at the top you'll see "Create New List," like so:
Luckily, it's not so hard to do -- you just have to make effective use of a Facebook feature called Lists. By grouping all your friends into lists you can make sure you're sharing the right information with the right people -- pictures from last night's epic party with your actual friends, sanitized vacation photos with co-workers, almost nothing with strangers. But just making a bunch of random lists won't work -- you need a plan, and we've got one for you that involves making just three lists to solve all your Facebook privacy worries. How? Read on for step-by-step instructions.

That'll take you to a large list of your friends, and at the top you'll see "Create New List," like so:

Hit Create New List, and the list editor will pop up. Don't worry about selecting friends in this window, just type in a list name and hit Create List.

Our system involves just three main lists:
- People I trust: These are your main dudes and ladies, your closest friends. You're only going to put 10-15 people on this one, max. My friend Will's version of this list is named Inner Circle; mine is named True Blue. It's the VIP list, so treat it accordingly -- people have to earn their spots.
- People I don't know well: Virtually everyone else you know goes on this list. It's the one for friends from class, or the people you only see at parties, or friends of friends. Remember, you really don't know that many people well -- anyone you wouldn't trust to keep those pictures of you on spring break in Mexico under wraps while you run for Congress goes on this list.
- Limited Profile: This is everyone you probably have to be friends with but that you don't really want seeing your profile. Your boss, your little cousin, your mother. You're going to lock this list down tight.

So now that you have your lists in hand, you have to go set them up. Go back up to the Accounts menu in the upper right and hit "Privacy Settings." That'll take you to the Privacy screen, where you want to hit "Customize Settings" at the bottom.

Once you're in the customize screen, you'll see a big list of all the content types that are on Facebook: photos, contact info, wall posts, links, videos, you name it. You're going to link all of this stuff to your lists and get some control back in your life. It's pretty simple -- first, click on the menu next to each category and hit Customize:

When the Custom Privacy box pops up, select "Specific People" and start typing in your list name, and it'll autofill, like so:

For added safety, I always put Limited Profile in the "Hide this from" field, but I'm probably just paranoid. Here's how I have all of my settings laid out, per category:
- Posts by me: People I Trust, People I don't know well
- Family: Friends Only
- Relationships: Friends Only
- Interested In and Looking For: Friends Only
- Bio and Favorite Quotations: Friends Only
- Website: Everyone (I work for Engadget, after all)
- Religious and political views: Friends Only
- Birthday: Friends of Friends (so people can find me)
- Edit Album privacy: Make sure you go through this when you're done -- it's a big one.
- Photos and videos I'm tagged in: People I Trust, hide from Limited Profile
- Can comment on posts: Friends Only
- Friends can post on my wall: Enable
- Can see Wall posts by friends: People I Trust, People I don't know well
- Mobile phone: People I Trust, hide from Limited Profile and People I don't know well
- Other phone: Only Me
- Address: Only Me
- IM screen name: People I Trust
- Email address: People I Trust
That's easy enough -- the real key is to limit photos and videos you're tagged in to the People I Trust list -- but we're not done yet. Go back up and hit "Edit album privacy" under Birthday to make sure only the right people are seeing the snapshots of your past. This one's totally on you -- you have to decide which of your albums you're going to share with what list -- but every photo album you've made should be assigned to a list, not just freely available to everyone or friends of friends. Trust us on this one -- it's easy enough to add someone to a list or to an album if they need access for some reason.

Okay, so now you've assigned all your content to lists. Now it's time to organize your friends. This is the fun part -- hit Edit Friends under the account menu again, click "Friends" under Lists on the left side, and you'll get a long list of all your friends. All you've got to do is drill through, delete all the people you don't know or don't remember by hitting the X on the far right side, and assign everyone else to a list by clicking on the drop down and picking the appropriate category: People I Trust, People I don't know very well, or Limited Profile. You'll be surprised at how easy it is to filter your social network into these categories -- they mirror your actual relationships with people, after all. Just remember: everyone should be on a list! This system doesn't work at all if you don't put everyone on a list -- after this big initial sorting, just add people to lists as you add friends -- it's super easy to do.
So that's my system -- this explanation might seem lengthy, but it really comes down to three steps:
So that's my system -- this explanation might seem lengthy, but it really comes down to three steps:
- Make three lists: People I Trust, People I don't know well, and Limited Profile
- Tweak your privacy settings to use the lists
- Sort your friends into the lists
That's easy enough -- and remember, you can always move people between lists, just like friends move between roles in your actual life. Yes, it's a little uncomfortable to think about relationships like this, but it'll be even worse if your boss finds that FurryCon '07 album one day -- and once you've got things set up the first time, it only takes a little maintenance to keep up. Facebook doesn't have to be terrifying, people -- get out there and make some lists.
P.S. Oh, while we're at it, make sure you hit up Engadget's official Facebook page -- you can also find me and Josh Topolsky if you like.
P.S. Oh, while we're at it, make sure you hit up Engadget's official Facebook page -- you can also find me and Josh Topolsky if you like.






















I already do these steps.
@JonsMind
Um... good job.... would you like a cookie?
@ebloomca If you wouldn't mind?
@ebloomca
Don't cookies cause even more privacy issues?
@JonsMind
Glad I deleted my facebook, almost as useless as the iPhone 4.
@JonsMind
Shit like this is annoying. I've known about lists since they came out. Facebook privacy has never been a problem. If you have such a hard time managing your Facebook, you should delete it and save everyone the eyesore of the 40th post about privacy problems, just like there have been over 9000 posts about Froyo.
Thanks for the great article, Nilay. I knew about these settings but didn't realize their importance until reading this article. I have put these practices into place (list names are Green, Yellow, and Red).
See what I did there? It's like a traffic light. No, the one in the US with all three colors. Yes, that one. What? Well that would just be silly...
Or only accept friend invites from people you know!
@yeoldgreat1 Well that'd be no fun..
A lot of work for privacy these days...
@golf1052
well, if you value privacy you shouldn't be on facebook in the first place...
@NonSuch - I had a fair amount of privacy when I first signed up for Facebook, they seem to keep looking for ways to do away with it though, or at least make it harder for you to control it.
@golf1052
I agree, I much prefer the way socialmore does it. But they're still in private alpha. So not a lot of friends on there yet.
Why put you other phone or address on there at all?
Every time someone makes a big stink about Facebook privacy, I wonder if they know anything about the extensive privacy tools Facebook already provides. Now I'll have something I can point them to and say "do this."
Me, I already do this. My lists are slightly more complicated (a little more granularity in the "people I don't know well" category, but the same basic idea applies.
@UnnDunn
The tools don't scale well. Try adding 2K people to a list after the fact. @!$#@! ZYNGA!
@ArhcAngel If you have 2000 friends on Facebook, you're doing it wrong.
@UnnDunn
What are you? The facebook police?
@ArhcAngel
srsly, you blew it.
thanks.
Will they know I put them in a certain list?
@glow They won't be notified of it, but it's not hard to figure out.
I've been holding out on signing up til yesterday, and the security is a real pain to set up. Wish I'd had this 24 hours ago! Thanks for the help nilay!
@Evileclipse Look at the bright side, you're spared the task of retroactively sorting a few hundred friends into lists. You can just do it on the fly.
Nice idea, but I already have 1700+ friends and don't have the time to reclassify them all. Currently Limited Profile is the only list I use. I use it for professional-only contacts who may have an impact on my career in the future, bosses, family members, people I knew through church, etc.
The irony of posting a link to your facebook profile after detailing exactly the problems having hundreds of friends creates doesn't occur to you?
@SamTheGeek It's not my profile, it's my fan page -- which is exactly what that's for!
@Indefinite Implosion JT keeps his Facebook page public, so he's not worried about privacy there.
@Nilay Patel Not a fan of fanpages so to speak. Or at least not facebookpages that are really run by other people than the person it's about. Besides I'm not a fan of any single person, we were all created equal, nobody should be demigods.
Nilay, I think you did better than Facebook itself in documenting this!
I do that. I'm shitty we can't hide everything from everyone if we wanted to any more. Why can't you hide your friends list from 'People I don't know well' or 'Work Colleagues' or 'Limited' any more? Mark Suckaberg basically bugger you I'll hide my stuff from you but you can't hide anything from me and the dodgy facebook app creators.
And Why can't they put a little padlock next to stuff on your profile so it you can lock down a particular feature. I'm sure that was there before then stripped away some of the settings.
Well, all of this will be irrelevant in a month or two, since every time Facebook decides to change something, they totally screw everything up and all your settings become meaningless.
...and this is all going to change next year
Facebook has absolutely zero incentive to keep your information private. They have every incentive to keep it public and sell it to advertisers.
Nothing on the internet is private. Some admin, somewhere can see it, even if it's perfectly secure from hackers. We all know that applications aren't perfectly secure, either, so hackers can easily glean your information and sell it to advertisers.
Let's not forget that Facebook is notorious these days as being used as evidence in court proceedings, especially divorce cases.
My advise: Do not post anything on Facebook that you would not feel comfortable showing the CEO of your company, your mom, a judge, your significant other, and your best friend. Although it's preferable not to use Facebook at all, these days it's a necessity. Keep your profile clean of as much private information as possible, and be careful.
I've had an 'Inner Circle' list for quite sometime. Can't let baby mommas and bosses see my weekend escapades
You still need to beware when using these lists. I recently had people I work with blocked from seeing certain info on Facebook. At some point, one of the restricted people was able to view this info shortly after I posted it. My guess is that Facebook had a database glitch which allowed this.
My point is that these should not be trusted 100%.
@STVA
Good call; I would add to suggest putting "Mark Zuckerberg" on the "People I don't trust" list.
@tobedetermined The only winning move is not to play.
As an extra step, use the "View My Profile As" function to verify that all the settings work as you intend them for people in your various lists.
@vypergts
Where is that at? I can't seem to find it.
@vypergts
Never mind.. found it.. Big 'Preview My Profile' button at the top of the customization page.
Is Facebook still asking for your email password?
The last time that i checked Facebook (years ago), Facebook asked me for my email password.
@magallanes Only if you want it to automatically find friends from your email's address book..
Being a university student with a quite large group of people that I spend a lot of time with, would call my friends, and feel that I can trust with a lot, I've tried to split the VIP list into "friends" and "close friends". Might end up joining the two depending on their size, since the privacy settings don't exactly let you fine tune things...
But I like the article! It's a good starting point for sorting out who sees what, and much better explained then the "guides" I've seen on the net and in papers so far..
How to guarantee the best possible privacy: http://www.facebook.com/help/contact.php?show_form=delete_account
@The Madman
amen, sister.
This works wonderfully, but how do you keep the updates from one of the lists from showing up on your news feed, beyond manually ignoring each person as they pop up?
The way I understand how it works, some one from the people I trust list has some knucklehead that you don't know or trust in their trust list. They therefore have access to your info because your buddy trusts them. Either that or Facebook changes the rules again and exposes you through no fault of your own.
@nilay - you should write for lifehacker.com