Your current profile picture is always public (though locked profiles show it as a small, non-enlargable thumbnail). However, you can manually change the privacy settings for each individual picture in your "Profile Pictures" album to make them private.

: Phishing pages will ask for your Facebook login credentials to "authenticate" the tool, immediately compromising your account. Legitimate Ways to View a Profile Picture