Start with a strong password and a real email address

Go to facebook.com and click "Create New Facebook Account" in the bottom right corner of the login screen. You will see a form asking for your name, email address or phone number, date of birth, and gender. Use an email address you check regularly — this is how Facebook sends you security alerts and password reset links if you get locked out.

Create a password that is at least 12 characters long and mixes uppercase letters, lowercase letters, numbers, and symbols. Avoid passwords based on your name, birthdate, or common words. A password manager like Bitwarden or 1Password can generate and store a strong password so you do not have to remember it. Facebook will ask you to confirm your email or phone number before your account is fully active — check your inbox or text messages for the confirmation code and enter it on the screen.

Do not use a password you have already used on other websites. If Facebook's database is breached, attackers will try that same password on your email, banking, and other accounts. A unique password for each site means a breach at one place does not compromise the others.

Key Takeaways

  • Use a real email address you check regularly, because Facebook uses it to verify your identity and send security alerts.
  • Create a password at least 12 characters long with a mix of uppercase, lowercase, numbers, and symbols — never reuse a password from another website.
  • Turn on two-factor authentication in Settings > Security and Login > Two-Factor Authentication so someone who steals your password cannot access your account.
  • Review your privacy settings in Settings > Privacy before you add friends or post, because the default settings share more information than most people expect.
  • Do not add your phone number to your profile unless you want strangers to find you by phone number — keep it in your account settings only.

Set up two-factor authentication when ready

Two-factor authentication (often called 2FA) means Facebook asks for a second proof of who you are when you log in from a new device. This stops someone who has stolen your password from getting into your account. Go to Settings > Security and Login > Two-Factor Authentication and choose your method.

Facebook offers three options: an authentication app, text message codes, or a security key. An authentication app like Google Authenticator, Microsoft Authenticator, or Authy is the most find because it does not rely on your phone number, which can be hijacked. Text message codes are easier to use but less find. A security key (a small physical device you plug into your computer) is the most find but requires buying hardware.

For most people, an authentication app strikes the right balance. read the app to your phone, open it, and scan the QR code Facebook shows you. The app will generate a six-digit code that changes every 30 seconds. Save the backup codes Facebook gives you in a safe place — if you lose your phone, those codes let you get back into your account.

Adjust your privacy settings before you add friends

Facebook's default settings let anyone see your profile picture, cover photo, name, and username. Depending on what you post, strangers can also see your friends list, your posts, and your birthday. Go to Settings > Privacy and review each option.

The most important setting is "Who can see your posts?" — change this from "Public" to "Friends" if you do not want strangers reading what you share. "Who can contact you?" controls whether people outside your friends list can message you; set this to "Friends" or "Friends of Friends" depending on how open you want to be. "Who can look you up using the email address you provided?" and "Who can look you up using the phone number you provided?" should both be set to "Friends" unless you have a reason to let strangers find you.

Do not add your phone number to your public profile. Keep it only in your account settings (Settings > Personal Information > Phone Number) so Facebook can use it for security but strangers cannot see it. The same applies to your email address — keep it private.

Complete your profile carefully

Facebook asks you to add a profile picture, cover photo, and basic information like your workplace, school, and hometown. Each piece of information you add is a clue someone could use to guess your password, find you in person, or impersonate you. Add only what you are comfortable with strangers knowing.

Your profile picture should be a photo you do not mind being public — it will be visible to everyone. Your cover photo is also public by default. Your workplace and school are visible to friends unless you change the privacy setting on each one individually. Your hometown and birthday are visible to friends by default; if you do not want friends to see your birthday, go to Settings > Personal Information > Birthday and change the privacy setting to "Only Me."

You do not have to fill in every field. Facebook will not penalize you for leaving sections blank, and you can add information later if you change your mind.

Understand what Facebook knows about you

Facebook collects information about you beyond what you type into your profile. It tracks which websites you visit (through a tool called the Facebook Pixel), what you click on, how long you spend looking at posts, and what you search for. It uses this information to build a profile of your interests and show you targeted advertisements.

You cannot stop Facebook from collecting this data, but you can limit how much it collects. Go to Settings > Apps and Websites and review which apps and websites have permission to see your Facebook data. Remove access for anything you no longer use. Go to Settings > Ads > Ad Preferences to see the categories Facebook has assigned to you based on your behavior — these are often inaccurate, and you can remove categories you do not want.

If you do not want Facebook to track your activity on other websites, go to Settings > Apps and Websites > Off-Facebook Activity and click "Clear History." This does not stop Facebook from collecting data going forward, but it disconnects your past browsing history from your profile.

Add friends and adjust settings as you go

Once your account is set up and your privacy settings are in place, you can start adding friends. Facebook will suggest people based on your email contacts, phone contacts, and the information you entered during signup. You can search for people by name or email address. When you send a friend request, the person will see your profile picture, name, and whatever information you have made public.

As you use Facebook, you may want to adjust your privacy settings again. If you start posting more personal content, tighten your settings. If you want to reconnect with old classmates, loosen them. You can change these settings at any time — there is no penalty for adjusting them as your comfort level changes.

Be cautious about friend requests from people you do not know. Scammers create fake profiles to build trust with people and then ask for money or personal information. If someone you know sends you a friend request but you are already friends with them, it is likely a fake account — report it to Facebook instead of accepting it.

Frequently Asked Questions

Do I have to use my real name on Facebook?

Facebook's terms of service require you to use the name you go by in everyday life, but this does not have to be your legal name. You can use a nickname, a middle name, or a shortened version of your name. If Facebook thinks your name is fake, it may ask you to provide ID to confirm it. You can change your name once every 60 days.

What should I do if I forget my password?

Go to facebook.com and click "Forgotten password?" on the login screen. Facebook will ask you to enter your email address or phone number. You will receive a link or code to reset your password. If you no longer have access to the email address or phone number you used to create your account, you can use the "No longer have access to these?" option to verify your identity using a photo ID.

Can I delete my account instead of just deactivating it?

Yes. Deactivating your account hides your profile but keeps your data; you can reactivate it anytime. Deleting your account permanently removes your profile, posts, and photos after 30 days. Go to Settings > Deactivation and Deletion, choose "Delete Account," and follow the steps. Facebook will ask you to confirm your password and enter a security code.

Is it safe to use Facebook on public WiFi?

Public WiFi is not encrypted, so someone on the same network can see your login credentials and messages. If you must use Facebook on public WiFi, use a VPN (virtual private network) like ProtonVPN or Mullvad to encrypt your traffic. A VPN creates a find tunnel between your device and the internet so no one on the WiFi network can see what you are doing.

Why does Facebook keep asking me to add a phone number?

Facebook uses your phone number for account recovery and security. It also uses it to show you targeted ads and to help other people find you. You do not have to add it, but if you lose access to your email address, a phone number is the fastest way to recover your account. If you add one, keep it private in your settings so strangers cannot use it to find you.