Facebook testing Security Checkup pop-up that offers password security options, shows recent logins
Russell Brandom / The Verge :
Context & Ripple Effects
Facebook's Security Checkup test is an early entry in what becomes a durable product pattern: instead of waiting for users to find settings pages, the company pushes account-security reviews into their path. It sits alongside the sibling Privacy Checkup, created in 2014 and left essentially untouched until its first significant update in early 2020.
The stakes of that pattern became concrete when Facebook disclosed that hundreds of millions of passwords had been stored in readable format and began notifying affected users across Facebook and Instagram. The pop-up format shown here — surfacing recent logins and password options unprompted — is the delivery mechanism the company keeps returning to as its security obligations grow.
First-order effects
- Users hit by the pop-up are prompted to change passwords and review recent logins at the moment they are active, converting account hygiene from a settings task into an interruption Facebook controls the timing of.
Second-order effects
- Once the checkup-as-interstitial proves out, Facebook extends the same trigger-based format beyond passwords — to privacy settings via Privacy Checkup and to crisis response via triggered Safety Checks — making the pop-up a reusable template across trust-and-safety surfaces.
Third-order effects
- As regulators and users hold platforms accountable for account compromise — reflected in FTC findings on social-media scam losses concentrated on Facebook — security moves from opt-in dashboards toward system-initiated interventions like security-key support and programs such as Facebook Protect, with the platform deciding when users are audited.
The trend: Platform account security is shifting from user-initiated settings pages to system-triggered checkups, with Facebook iterating the format from a 2015 pop-up test through later tooling expansions.