Technology

5 ways to make your Facebook account bulletproof

Published

2 years ago

March 18, 2024

Press Room

5 ways to make your Facebook account bulletproof

Join Fox News for access to this content

Plus special access to select articles and other premium content with your account – free of charge.

Please enter a valid email address.

Scammers are constantly looking for ways to access your Facebook account. It doesn’t matter who you are; they want your information. They’re even stealing accounts from dog shelters. And if they get in, some users say recovering your account is a hassle. That’s why it’s important to make sure your account is locked down.

Here’s how to keep your Facebook account secure and safe from any potential scammers or hackers.

CLICK TO GET KURT’S FREE CYBERGUY NEWSLETTER WITH SECURITY ALERTS, QUICK VIDEO TIPS, TECH REVIEWS AND EASY HOW-TO’S TO MAKE YOU SMARTER

Facebook app on a smartphone (Kurt “CyberGuy” Knutsson)

1) Change your Facebook password

One of the biggest things you can do is use a secure password on your account. Make sure it’s different from your other accounts. However, with data leaks becoming more frequent, it would be wise to change your passwords frequently — we recommend every three months.

How to change your password from your computer

Log into your Facebook account
Click the Account icon at the top right of the page (where your Profile picture should be)
Select Settings & Privacy
Select Settings
From the menu on the left of the screen, in the “Meta Accounts Center,” click “See more in Accounts Center“
On the next page, click “Password and security” towards the bottom of the left-hand navigation
Select Change Password
Choose an account to make changes. Select your Facebook account.
Enter your current password and then your new one twice to confirm in the edit fields
Tap on Change password

How to change your Facebook password from your iPhone

Changing your Facebook password from your iPhone is not much different from changing it from your computer. Here’s what you do:

Open the Facebook app and make sure you are logged in with the account for which you want to change the password
Tap the Facebook Menu button in the bottom right of the screen
Now tap Settings & Privacy
Click Settings
At the top in the “Meta Accounts Center,” click “See more in Accounts Center“
On the next page, click “Password and security“
Select Change Password
Choose an account to make changes. Select your Facebook account.
Enter your current password and then your new one twice to confirm in the edit fields
Tap on Change password

How to change your Facebook password from your Android

Changing your Facebook password from your Android also has very similar steps. Keep in mind that many Android phones act slightly different from one another, so these instructions may be similar, though not exact, for your phone and version of Android software.

Open the Facebook app and make sure you are logged in with the Facebook account for which you want to change the password
Tap the three horizontal lines on the navigation bar at the top of the screen
Tap Settings and Privacy
Then tap Settings
At the top in the “Meta Accounts Center,” click “See more in Accounts Center“
On the next page, click “Password and security“
Select Change Password
Choose an account to make changes. Select your Facebook account.
Enter your current password and then your new one twice to confirm in the edit fields
Tap on Change password

Use a password manager

Consider using a password manager to generate and store complex passwords for your Facebook account. It will help you create unique and difficult-to-crack passwords that a hacker could never guess. Second, it also keeps track of all your passwords in one place and fills in passwords for you when you’re logging into an account so that you never have to remember them yourself. The fewer passwords you remember, the less likely you will be to reuse them for your accounts.

Facebook account on laptop (Kurt “CyberGuy” Knutsson)

MORE: DON’T FALL FOR THAT ‘LOOK WHO DIED’ FACEBOOK MESSAGE TRAP

2) Set up two-factor authentication

Also known as 2FA, two-factor authentication has become a standard security setting. Working from home has made this even more common, as companies want to make sure you’re on a secure network before you use their programs. While it might seem annoying to follow a few extra steps to log in to your Facebook account, it’s worth it to protect your account from anyone else getting in.

Two-factor authentication requires you to approve a login on a separate device, so you’ll need to enable this feature on a desktop computer and then make sure you have the Facebook mobile app installed and logged in on your smartphone. Here’s how to turn it on from your computer:

Click the profile icon in the top right corner
Click Settings & privacy
Click Settings
At the top in the “Meta Accounts Center,” click “See more in Accounts Center“
Select Passwords and security on the left-hand sidebar
Click Two-factor authentication
Choose your account
Follow the prompts to enable two-factor authentication

Here’s how to turn it on from your smartphone:

Open the Facebook app
Tap the Facebook Menu button in the bottom right of the screen
Now tap Settings & Privacy
Click Settings
At the top in the “Meta Accounts Center,” click “See more in Accounts Center“
On the next page, click “Password and security“
Click Two-factor authentication
Choose your account
Follow the prompts to enable two-factor authentication

MORE: HOW TO OUTSMART CRIMINAL HACKERS BY LOCKING THEM OUT OF YOUR DIGITAL ACCOUNTS

3) Set up alerts for logins from unrecognized devices

You can opt in for text messages and email updates if anyone logs into your Facebook account from a device you haven’t marked as a recognized device. You can also have the notification pop up on your Facebook app. Here’s how to set up alerts for logins from unrecognized devices on your computer:

Click the profile icon in the top right corner
Click Settings & privacy
Click Settings
At the top in the “Meta Accounts Center,” click “See more in Accounts Center“
Select Passwords and security on the left-hand sidebar
Scroll down, and under “Security Checks,” tap Login alerts.
Click the account you want to set up the alerts for logins from unrecognized devices
Then, check either in-app notifications or email

Here’s how to set up alerts for logins from unrecognized devices on your smartphone:

Open the Facebook app
Tap the Facebook Menu button in the bottom right of the screen
Now tap Settings & Privacy
Click Settings
At the top in the “Meta Accounts Center,” click “See more in Accounts Center“
Click “Password and security“
Scroll down, and under “Security Checks,” click Login alerts
Click the account you want to set up the alerts for logins from unrecognized devices
Then, check either in-app notifications or email

Facebook app (Kurt “CyberGuy” Knutsson)

MORE: SCAMMERS ARE USING FAKE NEWS AND MALICIOUS LINKS TO TARGET YOU IN AN EMOTIONAL FACEBOOK PHISHING TRAP

4) Conduct a privacy checkup

Conduct a Privacy Checkup on your account about once a month to ensure it is still secure. Facebook will guide you through settings so you can ensure your data settings, ad preferences and search settings are all as you’d like them to be.

On a computer, click the profile icon in the top right corner of your Facebook page to find Settings & Privacy, then tap Privacy Checkup. Facebook will then guide you through some settings so you can make the right choice for your account.
On a mobile app, tap Menu at the bottom right, then tap Settings & Privacy, then Settings and tap Privacy Checkup. Facebook will then guide you through some settings so you can make the right choice for your account.

5) Never click suspicious links on Facebook

Do not click on suspicious links on Facebook, even if they appear to come from a friend or a company you know. This includes links as posts or in emails. Here’s what you can do to protect yourself:

Hover over the link: Most browsers show the actual destination URL when you hover your cursor over a link. Check if it matches the text displayed and looks legitimate.

Report suspicious links on Facebook. If you see a suspicious link on Facebook, be sure to report it. This helps keep the platform safe for everyone.

Have good antivirus software: The best way to protect yourself from clicking malicious links that install malware that may get access to your private information is to have antivirus protection installed on all your devices. This can also alert you of any phishing emails or ransomware scams. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android & iOS devices.

How to recover your Facebook account if you’ve already been hacked

You may realize a hacker has taken over your account if you can’t log in, or you may notice some red flags while still logged into your account – like posts you didn’t create. If you’ve already been hacked, follow these steps:

The first step is to check if you still have access to the phone number or email you set up your Facebook account.
If you do, go to facebook.com, make sure you’re logged out of any other account and click Forgot Account.
Follow the on-screen instructions to receive a recovery link to your email or phone number.

If you do not have access to the phone number or email associated with your Facebook account, head to facebook.com/login/identify. You’ll be able to fill out a form to have Facebook review your account while answering a few security questions to prove the account you’re trying to recover is yours. You’ll have to provide proof of ID, like a photo of a driver’s license. We understand there is hesitance to upload your ID, but Facebook says these uploads are encrypted and stored securely.

Another option:

Go to facebook.com/hacked from any device.
Notify Facebook about your compromised account.
Choose the relevant reason to help Facebook comprehend the situation. Then, proceed by clicking on Continue.
Facebook will prompt you to enhance your account settings. Initiate the process by clicking on Get Started.
Subsequently, it will commence evaluating your passwords, email addresses, connected apps and other pertinent details.
After selecting the reason, click on the Get Started button.
Upon completion of the analysis, you will be provided with the option to change your password once your email address is verified.
Follow the prompts to regain access to your Facebook account.

Kurt’s key takeaways

While locking down your Facebook account seems like a lot of work, it’s worth it. The peace of mind you’ll have knowing that hackers will have a hard time breaking into your account is priceless. Recovering your account can be difficult, so it’s better to get ahead of any hackers.

Do you feel like Facebook’s parent company, Meta, is doing enough to protect your Facebook account from hackers? What else do you think should be done to protect your account? Let us know by writing us at Cyberguy.com/Contact.

For more of my tech tips & security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.

Ask Kurt a question or let us know what stories you’d like us to cover.

Answers to the most asked CyberGuy questions:

Technology

Want to link from Google’s app store to your app? That’ll be $2–4 per install

Published

3 seconds ago

December 19, 2025

Press Room

Want to link from Google’s app store to your app? That’ll be –4 per install

Today was the deadline for Google to reveal how it’s complying with Judge James Donato’s order to crack open Android for third-party app stores, stop illegally tying its Google Play Billing system to its app store, and let developers link to ways to download their apps outside the Play Store in the US.

But Google isn’t just letting app developers do things however and whenever they’d like. The company’s quietly updated its support pages with a January 28th deadline to enroll in specific Google programs for “alternative billing” and “external content links” — and these programs will come with large alternative fees of their own, assuming Judge Donato doesn’t opt for Epic and Google’s proposed settlement instead.

While it isn’t collecting fees yet, Google says it will charge developers $2.85 for every app and $3.65 for every game a user installs within 24 hours of clicking a link that takes you outside Google’s app store to download them outside the Google ecosystem.

Plus, it’ll take a 20 percent cut of any in-app purchases and 10 percent of any auto-renewing subscriptions. Apps still need to be submitted to Google for review, use a Google API to track them, and developers have to report all transactions (including $0 free trials) if they want to participate.

Google’s service fees for external links.

Image: Google

Meanwhile, developers who want to offer their own billing solutions will only get a 5 percent discount compared to Google’s current fees, likely making it not worth the effort to try alternative billing at all. Google will charge 25 percent for in-app purchases and 10 percent for auto-renewing subscriptions there; devs will need to integrate a Google API to track those, and report all transactions within 24 hours.

The company will cap some of these fees at 10 percent of a developer’s first $1 million of earnings, making it a bit easier for small developers, but perhaps no easier than it is currently. Google already offers a similar cap at 15 percent, so this too is a 5 percent discount.

How will Judge James Donato react? When Apple told Judge Yvonne Gonzalez Rogers it would require a 27 percent fee for external payments in the parallel Epic v. Apple case, she found Apple in contempt of court, and an appeals court backed up that decision just days ago. However, the appeals court did suggest that Apple may be able to collect some fee, writing that:

Apple should be able to charge a commission on linked-out purchases based on the costs that are genuinely and reasonably necessary for its coordination of external links for linked-out purchases, but no more.

Google currently claims that “the fees associated with the external content links program reflect the value provided by Android and Play and support our continued investments across Android and Play.”

But Google also says it won’t collect any fees quite yet, writing:

In the future, Google intends to apply a service fee on successful transactions and downloads completed via external content links. At this time, however, Google is not assessing these fees and is therefore not requiring developers in this program to report these transactions or downloads to Google.

In their joint progress report today, Epic and Google’s lawyers write that while Epic agrees with the January 28th deadline and other requirements, “Epic has indicated that it opposes the service fees that Google announced it may implement in the future and that Epic will challenge these fees if they come into effect.”

Of course, none of this will come to pass if Judge Donato accepts Google and Epic’s proposed settlement instead, which would generally apply worldwide (instead of just in the US) and comes with lower standard transaction fees.

But Google signaled that settlement, too, would come with fees on alternative billing and external app downloads, and Judge Donato seemed skeptical of the settlement in November. He’s ordered an evidentiary hearing on January 22nd before he makes a decision.

Since Google’s support pages seem to be fluid as Epic v. Google continues, we’ve archived copies of their current text below.

Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.

Sean Hollister

Technology

Holiday deliveries and fake tracking texts: How scammers track you

Published

30 minutes ago

December 19, 2025

Press Room

Holiday deliveries and fake tracking texts: How scammers track you

NEWYou can now listen to Fox News articles!

As we head into the last stretch of December (and last-minute gift shopping), your doorstep is probably busier than ever. And if you’re anything like me, you’re probably also juggling shipping updates, tracking numbers, and “out for delivery” alerts from half a dozen retailers.

Unfortunately, scammers know this too, and they’ve likely been preparing for it all year. Like clockwork, I’ve already started seeing the usual wave of fake tracking texts hitting people’s phones. They look legit, they show up right when you’re expecting a package, and they rely on one inescapable truth: during the holiday rush, most of us are too overwhelmed to notice when something feels off.

No need to panic, though. You can still come out ahead of the scammers. I’ll show you what to look out for and how you can prevent being targeted in the first place.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

THE FAKE REFUND SCAM: WHY SCAMMERS LOVE HOLIDAY SHOPPERS

Holiday shoppers are being hit with a surge of fake delivery texts designed to steal personal information and account logins. (Photo by Sebastian Kahnert/picture alliance via Getty Images)

What fake delivery text messages look like

Most of these fake shipping texts include a “tracking link” that looks close enough to the real thing that you might tap without thinking twice about it. In some cases, like one Maryland woman found out, you may even receive fake deliveries with a QR code that works in a similar way.

These links usually lead to a spoofed tracking page that looks almost identical to the real thing. It’ll ask you to “confirm” your login or enter your delivery details. The moment you type anything in, scammers capture it and use it to access your real accounts.

Even worse, the “tracking link” may contain malware or spyware, triggering silent installs that can steal passwords, monitor keystrokes, or give scammers remote access to your device.

Red flags that reveal fake shipping and tracking messages

So how can you distinguish between a legitimate message for a delivery you’re actually waiting for and one of these scams? Here are the red flags I look for:

Weird or slightly altered URLs. Scammers use domains that look almost right. Except there’s usually one extra letter, a swapped character, or a completely unfamiliar extension.
Requests for additional payment. Real carriers don’t ask you to pay a “small fee” to release a package. That’s an instant giveaway.
A package you’re not expecting. If the text is vague or you can’t match it to a recent order, pause before you tap anything.
Delivery attempts at odd hours. “Missed delivery at 6:12 AM” or “late-night attempt” messages are usually fake. Carriers don’t normally operate like that.
Updates that don’t match what you see in the retailer’s app or email. If Amazon says your package is arriving tomorrow, but a random text says it’s delayed or stuck, trust Amazon, not the text.
Language that is designed to rush you. Anything screaming “immediate action required!” is designed to make you stop thinking and start tapping.

If a text triggers any one of these, I delete it on the spot. When in doubt, always check directly with the delivery service provider first before opening any links.

WHY YOUR HOLIDAY SHOPPING DATA NEEDS A CLEANUP NOW

Scammers are sending deceptive tracking links that mimic real carriers, hoping rushed shoppers won’t notice red flags. (Silas Stein/picture alliance via Getty Images)

How scammers know your address, phone number, and shopping habits

Scammers don’t magically know where you live or what you’ve ordered — they buy that information. There’s actually an entire industry of data brokers built on collecting and selling personal data. This can include your:

Phone number
Home address
Email
Purchase history
Browsing patterns
Retailers accounts and apps
Loyalty programs
Even preferred delivery times.

These data brokers can sell profiles containing hundreds of data points on you. And they aren’t always discerning about who they sell to. In fact, some of them have been caught intentionally selling data to scammers.

Once scammers have those details, creating a convincing delivery scam is no problem.

But scammers can’t target what they can’t find

I’ve been very vocal about the importance of keeping personal information under lock and key. And this is just one of the reasons why.

Criminals rely on your personal information to target you with these types of scams. They also need at least a phone number or email address to reach you in the first place.

So your best bet to avoid delivery scams (and, honestly, most other scams year-round) is removing your info from data brokers and people search sites. Doing this will keep your details out of circulation online and out of the wrong hands.

FBI WARNS EMAIL USERS AS HOLIDAY SCAMS SURGE

Fraudsters use spoofed shipping pages and malware to capture passwords and gain access to victims’ devices. (Martin Ollman/Getty Images)

How to remove your personal information from scammers’ reach

You can start by looking yourself up online. Searching for different combinations of your name, address, email, and phone number should bring up a bunch of people search sites. Just visit the “opt-out” page on each site to request removal of your data.

Private-database data brokers are a bit trickier. They sell data in bulk, usually to marketers and other third parties. So you won’t be able to check if they have your information. But if you look into which data brokers operate in your area, you can just send opt-out requests to them all. There’s a good chance they’ll have your information.

You can also turn to a data removal service. They completely remove the headache from this process and just automatically keep your personal info off data broker sites. If, like me, you don’t have the time to keep manually checking data broker sites and sending removal requests every few months (because your data will keep reappearing), a personal data removal service is the way to go.

While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

Kurt’s key takeaways

Holiday delivery scams work because they blend perfectly into the chaos of December shopping. A well-timed text and a familiar tracking link are often all it takes to lower your guard. By slowing down, checking messages directly with retailers, and reducing how much of your personal data is circulating online, you can take away the advantage scammers rely on. A little caution now can save you a major headache later.

Have you received a suspicious delivery text or tracking message this holiday season? If so, tell us what it looked like and how you handled it by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Kurt “CyberGuy” Knutsson is an award-winning tech journalist who has a deep love of technology, gear and gadgets that make life better with his contributions for Fox News & FOX Business beginning mornings on “FOX & Friends.” Got a tech question? Get Kurt’s free CyberGuy Newsletter, share your voice, a story idea or comment at CyberGuy.com.

Technology

Brendan Carr is a dummy

Published

12 hours ago

December 19, 2025

Press Room

All year on The Vergecast, we’ve been tracking the many bizarre and problematic actions of FCC Chairman Brendan Carr. There has been a lot to discuss! Then, this week, ahead of one of our last episodes of the year, Carr appeared in front of the Senate Commerce Committee and spent three hours explaining how he thinks about his job, the FCC, and the state of online communication and entertainment. It was a lot.

On this episode of The Vergecast, we begin with a dissection of Carr’s testimony, his threats against broadcasters, and the ways in which he’s using old ideas about content delivery to get his political way. Nilay and David walk through some of Carr’s most important quotes, explain the history of broadband regulation, and look ahead to how Carr might bring these same tactics to internet regulation next year.

Also, an important housekeeping note: The Vergecast will be live at CES! We’ll be at the Brooklyn Bowl in Las Vegas, at 3:30PM on Wednesday, January 7th. There will be podcasting, and hanging out, and bowling. It’s going to be great, and if you’re going to be in Vegas we’d love to see you there.

Until then, if you want to know more about everything we discuss in this episode, here are some links to get you started, first on Brendan Carr:

And in the streaming wars:

And in the lightning round: