How to Enable 2FA on Facebook
Hijacked Facebook accounts get used for scams, ad fraud, and locking out the real owner. Authenticator-app 2FA blocks anyone with just your password — and it's the method Meta itself recommends over SMS.
Quick path: Accounts Center → Password and security → Two-factor authentication → Authentication app
Step-by-step: 2FA setup on Facebook
- 1
Open Accounts Center
In the Facebook app or on facebook.com, go to Settings → 'Accounts Center' (it manages Facebook, Instagram, and Meta accounts together).
- 2
Go to Password and security
Inside Accounts Center, click 'Password and security' → 'Two-factor authentication', then pick the Facebook account you want to protect.
- 3
Choose 'Authentication app'
Select 'Authentication app' as the method (skip SMS — it's vulnerable to SIM swapping). Facebook shows a QR code and a setup key.
- 4
Scan with 2FAA
Open 2FAA's authenticator and scan the QR code (or paste the setup key). 2FAA starts generating your 6-digit Facebook codes.
- 5
Confirm with the current code
Enter the active code from 2FAA into Facebook and confirm. 2FA is now required for new logins.
- 6
Save your recovery codes
Under Two-factor authentication → 'Additional methods' → 'Recovery codes', Facebook shows 10 single-use codes. Store them offline — they're your lifeline if you lose the authenticator.
Generate Facebook 2FA codes with 2FAA
You don't need a separate authenticator app. 2FAA is a free, browser-based TOTP generator — your secret never leaves your device, and it works offline as a PWA. The same secret can be used in parallel with Google Authenticator or Authy if you prefer redundancy.
Frequently asked questions
Does Facebook 2FA also protect Messenger?
Yes. Messenger uses your Facebook account, so once 2FA is on, any new Messenger login requires the code too.
Can I set up Instagram 2FA from the same place?
Yes — Accounts Center covers both. Pick your Instagram account in the same Two-factor authentication menu, scan its QR code with 2FAA, and you'll have separate entries for Facebook and Instagram.
What happened to Facebook's Code Generator?
Code Generator was Facebook's built-in code feature in the mobile app. Meta has been phasing it out in favor of standard authenticator apps — the 'Authentication app' method above is the current, supported path.
Facebook says my code is wrong — why?
Almost always a clock issue. TOTP codes depend on accurate time — enable 'Set time automatically' on your device, then try the newest code from 2FAA. Also confirm you're using the entry for the right account (Facebook vs Instagram).