While Facebook is a "walled garden" that encourages everyone to sign up, there are still several ways to peek over the fence. Whether you are trying to find an old friend or check a business page, you don't always need a login.

Mira hesitated. The obvious tools—fake accounts, friend requests from strangers—were clumsy and left digital fingerprints. But she remembered something buried deep in Echo’s archives: a forgotten Facebook API endpoint from 2015, before Graph API v2.0 locked everything down. Back when the internet believed in openness.

When browsing without an account, your access is limited by the user’s :

These are almost always 100% visible to the public. Important Privacy Warnings

Google, Bing, and DuckDuckGo are your best friends. Facebook allows search engines to index "Public" profiles.

It wasn’t a login. It was a mirror. The Glass Key exploited a peculiar flaw in how Facebook cached profile images and public “about” info for SEO purposes. Even now, if you knew the exact numeric user ID—not the vanity URL, but the ancient, immutable ID—you could query a deprecated endpoint that Facebook had forgotten to fully disconnect. It returned a stripped-down JSON object: profile picture URLs from the last five years, check-ins from public posts, and the names of people who had tagged the user in comments (even if the user’s own timeline was locked).

On the other hand, this practice can infringe upon the reasonable privacy expectations of the user. While Facebook users bear the responsibility of managing their privacy settings (choosing between "Public," "Friends," or "Only Me"), the platform's default settings are often confusing. Many users assume their profiles are more private than they actually are. When a third party views a profile without an account—using a workaround that bypasses the social contract of "I view you, you view me"—it violates the unspoken agreement of the social network. It transforms the platform from a community into a surveillance tool.

Mira’s hands went cold. She didn’t need to see his private posts. The residue of his public digital life—the photos he was tagged in, the places he checked into, the friends who mentioned him—had painted a map of his stalking.