Can’t get your Facebook two-factor code? How to log in anyway

What to do first

Wait a few minutes before requesting another text. Carriers sometimes delay SMS, and repeat requests can leave you with several codes where only the latest works. While you wait, check these places:

• A phone, tablet or computer where you’re still logged in to Facebook.
• A printed or saved list of recovery codes.
• An authentication app on another device.
• A security key you registered.

Step 1: Approve the login from another device

If you’re logged in anywhere, check that device’s notifications. Facebook can show a prompt asking you to approve the new login. Approving from a device you already trust is the quickest fix and requires no code at all.

Step 2: Use a recovery code

Recovery codes are one-time codes you could save when you set up two-factor authentication. Enter one on the code screen instead of an SMS or app code. Each works once, so cross it off. Once you’re in, generate a new set and store them somewhere other than the phone you use for codes.

Step 3: Ask for more help

On the code screen choose Need another way to authenticate?, then Other options and Get more help. Follow the prompts. Facebook may ask for an ID, details about the account or a new contact method, then email you with next steps. Try it from a device and network you’ve used before, because Facebook weighs that signal.

Meta doesn’t publish a timeline for these checks. Complete the request once and wait for the reply instead of starting a second one.

Step 4: Fix it properly once you’re in

Once logged in you can turn two-factor authentication off, add a different authentication app, register a security key, or add a new phone number. Do at least two of these. The goal is that losing one device never locks you out again.

Why the SMS code is the weakest option

Text-message codes depend on a phone number that can be lost, recycled or intercepted through a SIM swap. An authentication app generates codes on the device itself and works without signal, which is why Meta’s own pages steer people toward apps and security keys when you set things up. If you’re still using SMS only, treat the lockout as a reason to add a second method before you need it.

A security key is stronger again. It’s a small physical device you plug in or tap, and it can’t be tricked by a fake login page. Keep one on your keyring and one in a drawer.

What not to do

• Don’t rely on “trusted contacts.” Facebook has discontinued that feature, so any guide telling you to ask friends for codes is outdated.
• Don’t forward a code to anyone, even someone claiming to be Facebook support.
• Don’t create a duplicate profile and tell friends the old one is gone. It makes recovery and impersonation reports harder.
• Don’t pay for a “code workaround.” No outside party can change what Facebook asks for.

Setting up a backup plan

Keep recovery codes in a password manager or a locked note, keep the phone number up to date, and register an authentication app on a second device where you can. If you travel often, keep an eye on roaming and SMS delivery before you leave.