I was surprised and wary when my coworkers said they started getting emails promoting something called Facebook Protect. What is it? Who is it for? PCMag editor Jason Cohen wrote about his experience with Facebook Protect recently.
The signup email looks an awful lot like a phishing scam. It even has some of the common red flags I urge people to look for before opening links or attachments from new contacts:
1. The email demands urgent action on behalf of the account holder.
2. The message is from a lesser-known domain (facebookmail.com)
3. Some of my colleagues didn’t see the message in Facebook’s archive of official account correspondence.
So far, so sketchy, right? It turns out, however, that the email is legit and so is Facebook Protect.
What Is Facebook Protect?
Facebook Protect is essentially the social platform’s version of multi-factor authentication. It was initially set up to help elected officials, political candidates, and their staff avoid account hacks that could spread disinformation. As disinformation around the Russia-Ukraine conflict continues, Facebook Protect has expanded its protection to cover people with high follower counts or Pages with a lot of social reach.
The program basically works by setting up multi-factor authentication for your account and allows for easy account monitoring. Also, Page admins need to confirm their primary country locations and use their real names.
Proactively Update Your Security
If you haven’t been asked to enable Facebook Protect yet, you can get ahead of the requirement and secure your account with multi-factor authentication methods. Need to change the way you authenticate? Go to the Security and Login section of your Facebook account on the web or the Password and Security section on a mobile device. Select Set up two-factor authentication, then enter your Facebook password. You can select a different authentication method or create a recovery code if you lose your phone and can't receive a verification code.
What Happens If You Do Nothing?
How much you want your information to be protected by Meta, a company with a history of privacy violations, is up to you. However, if you have a large following and you use Facebook, you have to enable the security feature to avoid being locked out of your account.
Real talk: Is an account lockdown really a bad thing? I stopped using Facebook in 2015. People I remembered dimly but fondly from high school were posting long, emotional diatribes about their political leanings. Their parents were posting links to unverified and inflammatory news that was racist at best and treasonous at worst. The site I used for communicating with old friends eventually exposed the worst of the human condition, and, eventually, I left.
Want to let go of Facebook for good? Delete your account, and you no longer have to worry about hacks or navigating a sea of disinformation. I know that deleting your Facebook account isn’t an option or a desire for everyone, but I’ve cut back on social media consumption to improve my mental health and overall wellbeing, and it’s been effective.
Like what you're reading? Get an extra SecurityWatch story delivered to your inbox weekly. Sign up for the SecurityWatch newsletterSign up for the SecurityWatch newsletter.
What Else Is Happening in the Security World This Week?
Russian Invasion Takes a Toll on Ukraine's Internet Access. The UK's Ministry of Defense says some of the outages are likely collateral damage from Russian military strikes, but some attacks on telecom equipment may be deliberate.
Nvidia Hackers Shift to Leaking Samsung Data. Samsung confirms a breach of "source codes relating to the operation of Galaxy devices," but not the personal information of consumers or employees.
Report: VPN Apps Surge in Popularity in Russia. Appfigures says VPN app downloads are up 1,200% in Russia, likely due to citizens trying to circumvent restrictions that have cut them off from social media and other sites blocked by the government.
ICANN Denies Ukrainian Request to Shut Down Russian Internet Domains. The internet's governing body tells the Ukrainian government it doesn't have the power to act unilaterally. "ICANN does not control internet access or content," it says.
Ukraine's 'IT Army' Is Attempting to Take Russia's GPS System Offline. Russian telecoms companies and the railway network in Belarus are also key targets.