Protecting your Facebook account for government, political and charity organisations

Meta offers a range of tools and features to help you stay protected on Facebook and Instagram. Here are the latest tips to ensure that your account remains safe and up to date.

1. Take the Security Checkup

The Security Checkup tool helps you:

• Log out of unused browsers and devices.
• Get alerts if someone tries to log in from an unrecognised device.
• Review and strengthen your password security.

You should also make sure that the email address associated with your Facebook account is current and accessible. This is crucial for account recovery and security notifications.

2. Password best practices

• Create strong, unique passwords: Use a password that is hard to guess and unique to Facebook. Avoid using your name, common words or easily available personal information. Learn more about strong passwords.
• Enable two-factor authentication (2FA): Two-factor authentication (2FA) adds an extra layer of security. When enabled, you'll need to enter a special login code or confirm your login attempt whenever someone tries to access your account from an unrecognised device. You can choose to get your code through SMS (text) or a third-party authentication app.

3. Review admin rights

If you manage a Facebook Page with multiple admins:

• Review Page admin roles regularly.
• Remove anyone who no longer needs access.
• If you use Meta Business Manager, learn more about roles and permissions to keep your business assets secure.

By taking these steps, we can create a more secure Facebook. If you need any assistance, please contact Meta Support Pros.

4. Control your visibility

If you don’t want a specific person to see your profile, add you as a friend or send you a message, you can block them.

Whenever you update your status, share photos or post anything on Facebook, you can select who sees what you share using the "Audience Selector" tool. Choose to share with everyone, just your friends or a customised audience.

5. Prevent phishing attempts

Phishing is when someone tries to get access to your Facebook or Instagram account by sending suspicious messages or links asking for personal information.

• Official Facebook emails always come from: @fb.com, @facebook.com or @facebookmail.com
• Official Instagram emails always come from: @support.facebook.com, @support.instagram.com, @mail.instagram.com

We strongly advise that you cross-reference any support emails or messages that you receive about your Facebook and Instagram accounts in your account settings before actioning on them. For Facebook, you can review all recent emails we’ve sent you from a list in your Security and Login settings. For Instagram, you can view official emails sent within the last 14 days from your Settings. Never type your login information anywhere except when logging in to your account.