Facebook is how many of us stay in touch with family and run small businesses. That also makes accounts a target. A hacked account can be used to send scam messages to everyone you know.
Turn on two-factor authentication
- Go to Settings and privacy, then Accounts Center.
- Open Password and security, then Two-factor authentication.
- Choose an authentication app or SMS.
With 2FA, a stolen password alone is not enough to log in.
Use a strong, unique password
Do not use your phone number, name or birthday. Use a passphrase that you do not use anywhere else.
Turn on login alerts
In Password and security, turn on alerts for unrecognised logins, so you are notified immediately if someone logs in from a new device.
Check where you are logged in
Review the list of devices logged in to your account. Log out of any device you do not recognise, and of old phones you no longer use.
Avoid these traps
- Fake “Facebook security” messages asking you to log in through a link.
- Quizzes and apps that ask for access to your account.
- Messages saying your page will be deleted unless you verify it.
If your account is hacked
- Try to log in and change your password immediately.
- If you cannot log in, go to facebook.com/hacked and follow the recovery steps.
- Warn your friends through another account or by phone not to send money.
- After recovering, turn on 2FA and remove unknown devices and apps.
Protect your email too
Your email account can reset your Facebook password. Secure it with a strong password and 2FA as well.