We have another Facebook retirement underway, but it’s actually for the better this time – as part of the broader update to its security settings, Meta is bidding farewell to its Facebook Code Generator element, which allowed users to log in on another device by using a code from, for example, their phone to authenticate their session. It’s basically Facebook’s version of two-factor authentication (2FA).

Code: Generated

In a notification shared by social media expert Matt Navarra, Facebook is now alerting people who still use Code Generator that it’ll soon be going away and that they should instead consider switching to another form of 2FA. Surprisingly, most people already have. Code Generator is only functional when you’re already logged in on another device,s o it’s now always available, and according to Meta’s Head of Security Policy Nathan Gleicher, it’s also vulnerable to attacks.

“Our in-app code generator was created before push notifications became widely adopted in our industry as a way to authenticate user sessions. We’re sunsetting the older approach to move the small portion of people who may still use it to more robust ones. It helps avoid redundancies (which can introduce their own security risks), so we’re following best practices to consolidate.”

Given how only a small portion of people still use the option, this update won’t likely have a huge impact – but if you sometimes find yourself being referred to Facebook to validate your login on other apps and websites, then you likely have to update your settings. This comes at a seemingly opportune time, entering the scene as Twitter moves away from SMS-based 2FA to reduce telecommunication charges, while Meta itself is also developing a new system to limit costs, by using missed calls as a verification method instead.

So, again, while this might, at best, be a minor update for most, it’s still something to consider, perhaps one that’s a bit bigger among older users. We’re sure that Meta also decided on this as a way to further ‘refresh’ its processes and boost awareness and engagement with its newer security tools and protocols.

The Wrap

Maybe this is the direction that Meta will be guiding users in at some point, while you can also use free apps like Google Authenticator or security keys. At the same time, Meta’s not getting rid of SMS 2FA, nor is it pushing for a Meta Verified exclusive. Well, at least not at this stage. If you fall into the category of legacy users that still utilize Code Generator, then it’s time to update.

Sources

http://bit.ly/439vF6L