The reality that anyone can access your Instagram and Threads accounts with your Facebook logins can sometimes be scary. Sure, creating a robust password keeps hackers behind bars, but what if they eventually know your password? That’s where setting up Facebook two-factor authentication comes in. Also known as 2FA, it adds an extra layer of security to your account, requiring a verification code from your device each time you make a login attempt. That way, anyone needs access to your phone to log in, even if they know your username and password.

Whether you prefer using a tried-and-true authenticator app, SMS, or hardware security key, here’s how to set up two-factor authentication on your Facebook account from a modest Android phone, iOS device, or a web browser.

How to activate 2FA for Facebook on your phone

Facebook offers two-factor authentication through authentication apps, SMS, and physical security keys. But you’ll likely use the first two in most cases. The platform recommends using an authentication app, which has an edge over SMS and doesn’t require a separate hardware device. Either way, it should take less than a minute to set up.

1. Open the Facebook app on your phone.
2. On Android, tap the three vertical lines in the upper-right corner. On iOS, click the menu button in the lower-right corner.

3. Tap Settings & privacy and then tap Settings. All other steps remain the same.

4. Click Meta Actions Center at the top of the page.
5. Tap Password and security.

6. Select Two-factor authentication in the first segment.
7. If you linked your Instagram account with Facebook, you’ll see two or more accounts on the next page. Choose your Facebook account to continue. You may need to confirm your password.

8. To use an authentication app such as Google Authenticator or Authy, tap Authentication App.
9. Facebook shows an instruction guide for your authentication app alongside an emboldened security key. If you have the authenticator on the same phone, tap Copy key. However, Setting up with a QR code is faster if your authentication app is installed on another phone.

10. Configure the security key in your authentication app.
11. Once it’s ready, enter the code shown in the auth app into Facebook, then click the blue Next button below the screen before it expires.
12. If it’s done right, the next page informs you that your Two-factor authentication is on. Click Done to exit the page.

The process is similar if you prefer SMS or hardware token for your Facebook 2FA method. You only need to follow the on-screen instructions to complete the process. Meanwhile, you can add either as a backup in case your authenticator app acts up (more on that later). However, hackers or anyone who has access to your phone or can intercept your text messages can hack your Facebook account, and that’s a reason to use 2FA from an app or hardware token.

How to activate 2FA for Facebook in your browser

If you use Facebook mainly from your computer, activating two-factor authentication is similar.

1. Open www.facebook.com in your favorite browser.
2. Click your profile picture in the upper-right corner of the page.
3. Select Settings & Privacy from the drop-down menu.

4. Click Settings.

5. Click Meta Accounts Center on the left side.

6. Switch to the Password and security tab on the left.
7. Select Two-factor authentication.

8. Choose your Facebook account from the list if you have multiple options.

9. Choose your security method and click Next. If you have one of the best 2FA apps, select Authentication app. Facebook also recommends it.

10. Open the authentication app on your phone and scan the QR code.
11. Tap Next on your computer to continue.

12. Find the generated 6-digit code on the authentication app, then type it into the Facebook text field.
13. Click Next before the code expires.

14. Click Done to complete the 2FA process.

How to not get locked out of your Facebook account

Setting up 2FA on your Facebook account is paramount to protect it from hackers. However, you could get locked out of your account if your security methods aren’t available. Perhaps after losing access to your SIM card, authentication app, or token hardware. Before that happens, ensure you have a backup with these additional security methods.

Save your recovery codes somewhere

Facebook offers five recovery codes if you can’t access your 2FA method. Save them somewhere you can always access.

1. Navigate to the Two-factor authentication settings by following the first few steps above. (Settings > Meta Accounts Center > Password & security > Two-factor authentication).
2. Under How to get login codes, select Additional methods.
3. Tap Recovery codes.

4. Write the codes in a safe place. You can use each recovery code once.

Add a backup security method

Did you set up 2FA with an authentication app? Add SMS or Security Key as a second method. This gives you options when a security method doesn’t work.

1. Navigate to the Two-factor authentication settings on Facebook (Settings > Meta Accounts Center > Password & security > Two-factor authentication).
2. Under Add a backup method, select another security method.
3. Complete setting up your backup security, as explained earlier.

More ways to stay secure

Two-factor authentication is a great way to keep your accounts safe, but it shouldn’t be your only line of defense against hackers. Creating a difficult-to-guess password is helpful, and you don’t have to worry about generating or remembering them if you have a solid password manager.