Facebook makes 2FA mandatory for high-risk accounts, an expansion of Facebook Protect, which covers 1.5M accounts and will be in 50 countries by the end of 2021
Carly Page / TechCrunch :
Context & Ripple Effects
Facebook had already imposed 2FA on people managing Pages with large U.S. followings in its earlier Page-manager security requirement. A year before this expansion, it also outlined mobile security-key support and a broader Facebook Protect rollout.
The new policy extends that targeted-security approach to high-risk accounts through Facebook Protect, taking the program to 1.5 million accounts and 50 countries by the end of 2021.
First-order effects
- High-risk Facebook account holders covered by Facebook Protect must adopt 2FA rather than treating it as an optional account-security setting.
- Facebook Protect becomes a larger operational security program, with coverage expanding across 50 countries and 1.5 million accounts.
Second-order effects
- The earlier Page-manager requirement and the broader Protect rollout create a more consistent security baseline for Facebook users whose accounts can have outsized reach.
- Facebook’s security-support burden rises because a mandatory program must accommodate the authentication methods it had been expanding, including mobile support for security keys.
Third-order effects
- Facebook is moving from narrowly scoped authentication mandates toward protection programs that assign stronger safeguards based on account risk, rather than leaving security entirely to user choice.
- The later pattern of automatically enrolled protections for young users suggests a broader platform-governance model in which Meta applies mandatory defaults to defined higher-risk groups.
The trend: Meta is increasingly treating targeted, mandatory account protections as platform infrastructure for user groups it classifies as carrying elevated risk.