How to Enable 2FA on Facebook & Add a Passkey (2026)

Facebook accounts get hacked every day, and the results can be painful: lost photos, fake posts, money requests sent to your friends, and even your business page stolen. Most of these hacks would have failed if one setting had been on: two-factor authentication (2FA). In 2026, Facebook also supports passkeys, which let you log in with your fingerprint or face instead of a password.

This guide shows you how to enable 2FA on Facebook step by step on Android, which 2FA method is safest, how to set up a passkey, and the other hidden security settings that make your account very hard to hack.

What Is Two-Factor Authentication (2FA)?

Normally, your password is the only thing protecting your account. With 2FA, Facebook asks for a second proof when someone logs in from a new phone or browser, such as a code from an app on your phone or a security key. So even if a hacker steals or guesses your password, they still can't get in without your phone.

How to Enable 2FA on Facebook (Android App)

1. Open the Facebook app and make sure you're logged in.
2. Tap the Menu (three lines or your profile picture).
3. Go to Settings & privacy > Settings.
4. Tap Accounts Center, then Password and security.
5. Tap Two-factor authentication and select your Facebook account.
6. Re-enter your password. Facebook may send a code to your phone or email to confirm it's you.
7. Choose your security method (see below) and follow the steps on screen.
8. Save the recovery codes Facebook gives you. Write them down or store them in a password manager.

Which 2FA Method Should You Choose?

Our advice: use an authentication app as your main method, and keep your recovery codes somewhere safe. If you run a business page or ads account, consider a security key.

How to Set Up a Facebook Passkey

A passkey lets you log in to Facebook with your fingerprint, face or phone PIN, so there's no password for scammers to phish. Passkeys work in the Facebook apps for Android and iPhone.

1. Update the Facebook app from Google Play.
2. Go to Menu > Settings & privacy > Settings > Accounts Center.
3. Tap Password and security > Passkeys, then Create passkey.
4. Enter your Facebook password, then confirm with your fingerprint, face or PIN.
5. Test it: log out, then log back in with your fingerprint.

7 More Facebook Security Settings to Turn On

1. Check where you're logged in

In Accounts Center > Password and security, open Where you're logged in. If you see a phone or location you don't recognise, log it out and change your password.

2. Turn on login alerts

Also under Password and security, turn on Login alerts so Facebook tells you whenever someone logs in from a new device.

3. Run the Security Checkup

Facebook's Security Checkup (in Accounts Center under Password and security) walks you through weak spots, such as old sessions and missing 2FA, in a couple of minutes.

4. Use a strong, unique password

Never reuse the password you use for email or other apps. If one site leaks, hackers try the same password on Facebook.

5. Secure the email linked to Facebook

Whoever controls your email can reset your Facebook password. Turn on 2FA for your Gmail or other email account too.

6. Lock your profile details

Hide your phone number and email from the public in your profile privacy settings. Scammers use them for phishing and SIM-swap attacks.

7. Remove apps you don't use

Review the apps and websites connected to your Facebook account and remove any you no longer use.

Signs Your Facebook Has Been Hacked

• Your password or email was changed and you didn't do it.
• Friends get messages or friend requests you didn't send.
• Posts, ads or comments appear that you didn't make.
• You get login or password reset emails you didn't request.

If this happens, go to facebook.com/hacked straight away from any browser and follow the recovery steps. Then turn on 2FA as soon as you're back in.

Common Facebook Scams to Avoid

• "Your page will be disabled" messages that link to fake Meta login pages.
• Requests for your 2FA or login code. Never share it with anyone.
• Fake giveaways and job offers that ask you to log in through a link.
• Hacked friends asking for money. Always call them first.

FAQs

Is 2FA on Facebook free?

Yes. Two-factor authentication and passkeys are free.

What if I lose my phone with my authentication app?

Use one of your saved recovery codes to log in, then set up 2FA again on your new phone.

Is SMS 2FA safe?

It's much better than nothing, but an authentication app or security key is safer, because SMS codes can be stolen through SIM swaps.

Can I use a passkey and 2FA together?

Yes. A passkey makes logging in easy and phishing-proof, while 2FA protects any login that still uses a password.

Where is Accounts Center?

In the Facebook app, go to Menu > Settings & privacy > Settings, and you'll see Accounts Center at the top.

More Android tricks: How to know if your WhatsApp is hacked · Android's hidden anti-theft features · How to hide apps on Android

Sources: Malwarebytes, Make Tech Easier. Image credits (Wikimedia Commons): "CryptoCard two factor" by Brian Ronald (CC BY-SA 4.0); "Username and password" by Santeri Viinamäki (CC BY-SA 4.0). Facebook is a trademark of Meta Platforms, Inc.