Facebook, which supported security keys on desktop since 2017, expands support to iOS and Android users
Facebook has supported security keys on desktop since 2017 and will now enable iOS and Android users to log in to their account via the physical key.
ZDNetNatalie Gagliordi
Context & Ripple Effects
Facebook's hardware-key story is a slow rollout finally reaching its second act: the company added physical USB keys, including Yubico's NFC key for Android, back in its 2017 desktop push, and previewed this exact move when it unveiled a slate of security tools for 2021 last December. Mobile key support was the headline item of that batch, and it has now shipped.
The timing matters because Facebook accounts are high-value phishing targets — the same platform where the FTC later traced hundreds of millions in social-media scam losses. Bringing hardware-backed login to the phones where most people actually use Facebook closes the gap between the company's strongest authentication option and its largest user surface.
First-order effects
iOS and Android users can now log in with a physical security key rather than relying on passwords or SMS codes, extending a protection previously limited to desktop since 2017.
Second-order effects
Security-key vendors gain a mass-consumer distribution channel beyond enterprises, as Yubico's earlier Android NFC support showed the hardware can serve mainstream social logins, not just corporate fleets.
Third-order effects
The trajectory runs from physical keys toward platform-native credentials: Meta itself later moved to passkeys on Facebook and Messenger, following 1Password's cross-platform passkey support and X's post-SEC-hack adoption — suggesting hardware tokens become a bridge technology before phone-based passkeys absorb the use case.
The trend: Consumer platforms are migrating authentication from passwords toward hardware-bound credentials, with physical security keys as the transitional step before passkeys take over on mobile.
Today, we are extending support for mobile security keys for Facebook iOS/ Android users. Security keys help ensure that passwords aren't the last line of defense between an attacker and your account. Learn more about security keys & how to use them here: https://about.fb.com/...…
Glad to see Facebook adding mobile device support for hardware security keys. The more sites that support @FIDOAlliance technology, the better for everyone 🔐 https://www.zdnet.com/...
Social media platforms are stepping up their authentication game 👏 Last week, Twitter announced multi-key support, and today, Facebook announced you can now log into Facebook on iOS and Android mobile devices using a security key. https://about.fb.com/...
Well, at least the demo gif for this clearly shows that option. The news post doesn't mention it. (Which would be valuable information for users, obviously.)
1/ Today we extended support for hardware security keys for iOS/Android. This is important for anyone, but especially for frequently targeted groups like journalists, human rights defenders, political campaigns, gov officials, and public figures. https://about.fb.com/...
Hardware keys are the best 2FA out there, and a reliable protection when 2FA phishing is on the rise, and SS7/Telcos fail at security. Supporting and implementing this for billions of users is no small task, glad it shipped! https://twitter.com/...
Great news! Now you can use #FIDO security keys for the highest levels of protection of your @Facebook account on desktop AND mobile. Facebook has extended its support of FIDO security keys to mobile on iOS and Android! https://about.fb.com/...
Starting today, you can set up two-factor authentication and log into Facebook on iOS and Android mobile devices using a security key — available to anyone in the world. https://about.fb.com/... https://twitter.com/...
Nice. Importantly, this includes the ability to use modern iOS and Android phones themselves as security keys. Meaning you don't already need to own a separate USB-C/BT/NFC key to use strong hardware-based authentication. Well done. https://twitter.com/...
Remember when Facebook used phone numbers that people used for security authentication to target ads? That was fun. Anyway, Facebook promised the government to stop doing that, and this is good: https://about.fb.com/...
Facebook launches security keys enrollment and two-factor authentication for the iOS and Android app tweeted 413 days before launch https://about.fb.com/... https://twitter.com/...