Free · 10 minutes

Lock it down

Do this once and hackers have a much harder time. 0 of 10 done

Email first
Change the password of the email linked to Instagram/Facebook, and turn on 2-step verification for that email.

New, unique password
Use a password you have never used anywhere else. A password manager makes this easy.

Two-factor with an authenticator app
Accounts Center → Password and security → Two-factor authentication → Authentication app.

Save backup codes
Save them in two places (password manager + a printout).

Log out unknown devices
Accounts Center → Password and security → Where you’re logged in.

Check your email & phone
Accounts Center → Personal details. Remove anything that isn’t yours so alerts reach you.

Check recent emails from Meta
Learn to check whether a "security" email is real before tapping anything.

Remove strange apps
Remove websites and apps you don’t recognize that are connected to your account.

Know the scams
"Copyright violation", "verified badge offer", "vote for me", "send me the code I sent you": all classic tricks.

Monthly 5-minute check-up
Devices, email/phone, 2FA still on, backup codes still saved.

Add a free monthly 5-minute check-up to your calendar. (The paid Guard plan will send reminders for you once payments are live.)