Enable 2FA on WhatsApp, Instagram, and Facebook

Turn On 2-Factor Authentication for WhatsApp, Instagram & Facebook (Step-by-Step, 2025)

Use the collapsible sections below. Each step includes an image slot you can fill with your own screenshots.
Tip: Prefer an authenticator app over SMS whenever possible.

Quick Start

  1. WhatsApp → Settings → Account → Two-step verification → Turn on → set 6-digit PIN → add email for recovery.
  2. Instagram → Profile → Menu → Accounts Center → Password and security → Two-factor authentication → choose Authentication app (or WhatsApp/SMS) → save backup codes.
  3. Facebook → Menu → Settings & privacy → Settings → Accounts Center → Password and security → Two-factor authentication → pick Authentication app, Text message, or Security key → save recovery methods.

(Press on Open to see article)

WhatsApp: Turn on Two-Step Verification

Open (Android & iPhone)

  1. Open WhatsApp → tap Settings.
    Open WhatsApp Settings

  2. Go to Account → Two-step verification.
    Account → Two-step verification

  3. Tap Turn on → choose a 6-digit PIN.
    Create 6-digit PIN

  4. Add a recovery email (recommended).
    Add recovery email

  5. Manage later under the same screen.
    Manage two-step verification

Instagram: Turn on Two-Factor Authentication

Open (Android, iPhone & Web)

  1. Go to Profile → Menu → Accounts Center.
    Open Accounts Center

  2. Tap Password and security → Two-factor authentication.
    Password and security → Two-factor

  3. Choose a method:

    • Authentication app (recommended)
    • WhatsApp or Text message
      Choose method

  4. Save backup codes.
    Backup codes

  5. Manage trusted devices.
    Manage devices

Facebook: Turn on Two-Factor Authentication (+ Security Keys)

Open (Android, iPhone & Web)

  1. Tap Menu → Settings & privacy → Settings → Accounts Center.
    Accounts Center

  2. Go to Password and security → Two-factor authentication.
    Password & security → 2FA

  3. Choose your method:

    • Authentication app
    • Text message (SMS)
    • Security key (USB/NFC)
      Choose 2FA method

  4. Save recovery/backup options.
    Save backups

  5. (Optional) Set Login alerts.
    Login alerts

Best Practices (All Three)

  • Prefer an authenticator app to SMS.
  • Store backup codes offline.
  • Never share verification codes with anyone.

Recovery & Troubleshooting

Facebook

  • Try alternate methods (authenticator, SMS, security key).
  • Check Login alerts and recovery options.

Instagram

  • Use backup codes or trusted devices.
  • Keep email/phone access updated.

WhatsApp

  • Reset your PIN with the recovery email.
  • If no email was set, wait for the cooldown period.

Image Checklist

  • WhatsApp: 5 slots (Settings → Account → PIN → Email → Manage)
  • Instagram: 5 slots (Accounts Center → Security → Method → Backup → Devices)
  • Facebook: 5 slots (Accounts Center → Security → Method → Backup → Alerts)

FAQ

Which method is safest? Use an authenticator app or security key. SMS is least secure.

Do I need to set this up on every device? No—approve trusted devices as you log in.

Can I turn it off later? Yes—go back into 2FA settings to disable.