Facebook Profile Guard Toggle

A Chrome extension that enables or disables Facebook's Profile Picture Guard with a single click.

Screenshot

Features

• One-click toggle for Profile Picture Guard
• Uses Facebook's GraphQL API with multiple doc ID fallbacks
• UI fallback when API is blocked (automated menu navigation)
• Automatic extraction of fb_dtsg and c_user tokens
• Changes apply account-wide and are visible on mobile devices
• Remembers the last set state between browser sessions

Installation

1. Download or clone this repository.
2. Open Chrome and go to chrome://extensions.
3. Enable Developer mode (toggle in the top right).
4. Click Load unpacked and select the extension folder.
5. The extension icon will appear in your toolbar.

Usage

1. Navigate to the desktop version of Facebook (web.facebook.com or www.facebook.com).
   The extension will not work on the mobile site (m.facebook.com).
2. Click the extension icon in the toolbar.
3. The popup displays the last known state (or Unknown if never toggled before).
4. Click the toggle to turn Profile Guard ON or OFF.
5. A confirmation message will appear indicating whether the change was made via API or UI fallback.

Warning

State detection is currently unreliable on desktop.
Facebook's desktop interface does not visually reflect the Profile Guard state, and the API does not reliably report the current status. Therefore, the extension cannot automatically detect whether the guard is already enabled.
However, the extension remembers the last toggle action you performed and displays that state. The toggle itself works correctly — changes apply account‑wide and can be verified on the Facebook mobile app or mobile website.

Permissions Justification

Permission	Purpose
activeTab	Access the current Facebook tab to extract tokens and execute toggle actions.
scripting	Inject scripts into Facebook pages to interact with the DOM and API.
storage	Save the last known guard state and update notification preferences.
notifications	Show update available alerts.
webNavigation	Detect page loads to refresh internal state.
*://*.facebook.com/*	Allow the extension to run only on Facebook domains.

Files

• manifest.json – Extension configuration
• background.js – Service worker handling token extraction and toggle logic
• popup.html – Extension popup interface
• popup.js – Popup interaction logic and state persistence
• icons/ – Extension icons in various sizes

Disclaimer

This extension is not affiliated with, endorsed, or sponsored by Facebook. Use at your own risk. The developer is not responsible for any account issues arising from its use.

License

This project is licensed under the MIT License. See the LICENSE file for details.