Facebook Locked Profile Picture Viewer Online Better Now

Notice the height=200&width=200 . That is a request parameter. You might think, "I will just change it to 2000!" However, Facebook’s server validates the asid (account ID) against the viewer’s session token. If you are not friends, the server returns a , not a larger version.

The reason none of these work is simple: Facebook stores locked profile pictures on private servers with access control lists (ACLs) that block unauthenticated or unauthorized requests. No “online viewer” can override that without hacking Facebook’s core infrastructure—a feat no publicly advertised web tool has ever achieved.

A: No. Inspect Element only shows the code that Facebook sends to your browser. Since Facebook only sends a low-resolution thumbnail to non-friends, that is all you can inspect.