How to setup MFA on Facebook

Setting up Multi-Factor Authentication (MFA), which Facebook calls Two-Factor Authentication, is a crucial step to protect your account from hackers.¹ It requires a second form of verification in addition to your password to prove it’s really you.²

Here is a step-by-step guide to enable it on your Facebook account. The process is similar on both the mobile app and the desktop website.

Step-by-Step Guide

1. Go to Settings:
   • On the Facebook App: Tap the three horizontal lines (the “hamburger” menu) in the bottom-right or top-right corner, depending on your device.³
   • On the Desktop Website: Click on your profile picture in the top-right corner.⁴
2. Navigate to Accounts Center:
   • Select Settings & privacy, then click on Settings.⁵
   • From the Settings page, go to Accounts Center.⁶
3. Go to Password and Security:
   • In the Accounts Center, tap on Password and security.⁷
4. Find Two-Factor Authentication:
   • Under the “Security checks” section, tap on Two-factor authentication.
   • You may be prompted to enter your password again for verification.
5. Choose Your Security Method:
   • Facebook will present you with several options.⁸ The most common and recommended are:
     • Authentication App: This is the most secure method.⁹ It uses a third-party app (like Google Authenticator, Microsoft Authenticator, or Authy) to generate a unique, time-sensitive code.¹⁰
     • Text Message (SMS): A code is sent to your phone number via SMS.¹¹ While convenient, it’s considered less secure as SMS can be vulnerable to certain attacks.
     • Security Key: This is a physical device that you plug into your computer or use via Bluetooth.¹² It is the most secure option to prevent phishing.
6. Complete the Setup:
   • If you chose an Authentication App: Facebook will provide a QR code or a text key.¹³ Use your authenticator app to either scan the QR code or manually enter the key to link your account.¹⁴ Then, enter the 6-digit code from the app back into Facebook to confirm.¹⁵
   • If you chose Text Message (SMS): Select or add the phone number you want to use.¹⁶ Facebook will send a code to that number.¹⁷ Enter the code to complete the setup.¹⁸
7. Turn On 2FA: After successfully completing the chosen method, Facebook will confirm that Two-Factor Authentication is on. You will now be required to use your second verification step whenever you log in from a new device or browser.¹⁹

It is also highly recommended to set up Recovery Codes or another backup method in case you lose access to your phone or primary authentication method.²⁰ You can find this option in the Two-Factor Authentication settings.