MaskWright

2026-06-19 · Priya Nair · 776 words

Facebook Business Manager isolation

Business Manager isolation for authorized entities. No recycled BMs. This commercial page is hygiene for a BM you already control, not a restore guide.

Facebook Business Manager isolation 1

I open Business Manager in a local profile that belongs to that entity. Personal Facebook stays out. A recycled BM you bought in a chat is not a profile problem. It is a terms problem I will not help with.

The useful caveat: this page is hygiene for a Business Manager you already control. It is not a restore guide. Facebook ads account limits are business facts. A new folder does not reopen a disabled ad account.

What the profile holds

Business Manager. Ads Manager for that entity. Pixel helpers that fire for that brand. Page admin that Meta already tied to this login.

It does not hold birthday Facebook, a second client's BM, or a research tab full of competitor Pages. Facebook personal versus business rooms. Facebook pixels stay in brand rooms.

Multiple accounts on one PC is the parent split. MaskWright 0.1: Windows 10/11, one user-data-dir per profile, no seats, no cloud sync. profiles.json is encrypted. Chromium user data is not. Bring your own HTTP or SOCKS5 if that entity already uses an exit.

A contractor gets a role. They sign in as themselves. Facebook page roles, not cookie dumps. I do not zip the profile folder. I do not mail Netscape cookies.

If two brands are two businesses that must not share pixels, they get two official BMs (or whatever Meta already issued) and two folders. Matching locale is fine. Matching cookies are not.

Pixels stay put

A pixel helper in the wrong profile is how Brand A starts telling stories about Brand B's traffic. Same class of mistake as TikTok pixel and cookie bleed. Unpacked extensions in MaskWright load per profile. Install the pixel helper only where it belongs.

Other platforms are other folders

If the desk also runs TikTok creators, that is TikTok creator accounts you own, not a tab in the BM profile. Device checks on TikTok are a different surface. TikTok device checks we can see. I do not mash both pixels into one Chromium tree because the monitor is wide.

JobProfile
BM / ads / pixel for Entity AEntity A work profile
Personal FacebookPersonal profile
Entity BEntity B work profile
Public Page lookingEmpty research profile

What I will not write

I will not write how to buy, age, or recycle Business Managers. I will not write how to restore a disabled ads account with a new fingerprint. I will not write warmup.

If Meta asked for identity documents, that is Meta's process. Complete it as the owner.

On a real Windows desk

I name the profile after the legal entity, then I launch Chromium for that folder only. If the custom 131 core is missing, launch may use system Chrome or Edge. I pick one engine and keep it. I do not bounce cores inside a BM folder.

Proxy credentials, if any, live in the encrypted index. The live cookies live in the unencrypted Chromium tree. That split is why I treat the folder as the login even though profiles.json is locked.

I invite partners in Business Manager before they ever install MaskWright. On their PC they create an empty profile, sign in as themselves, and complete 2FA on hardware they hold. If they ask for a cookie file "to go faster," the answer is no.

Pixel helpers install unpacked into this profile only. I do not leave a Meta pixel extension sitting in a research profile from last quarter. Reports I actually need go to an ops share, not to Desktop that OneDrive then syncs into the mixed world.

FAQ

Can I keep personal Facebook in BM "because I am the admin"?

You can. I do not. Personal scrolling, birthday events, and Marketplace browsing do not belong next to ad spend. Split the folders even if one human owns both logins.

I do not sell that. Isolation stops cookie mixing. Payment identity, documents, and platform graph are Meta's business. Follow their rules. Do not invent a second BM to dodge a limit.

Do I need a proxy for BM?

Only if that entity already uses one. MaskWright does not bundle exits. A household IP is normal for work you are allowed to do from that house.

Is cloud BM access safer?

A cloud browser holds a second copy of the session. I keep BM on local disk. Compare local versus cloud if that trade is the decision you are making.

Open BM as the entity you already administer. Invite people with roles. Leave personal Facebook and research elsewhere.

More notes sit under Social media. Download MaskWright for the Windows launcher.

Related notes