If you are locked out of Facebook by two-factor authentication, you can usually get back in without the code: use Try another way on the login code screen, approve the login from a device that is still signed in, or enter a saved recovery code. If none of those work, Meta offers an identity confirmation path that may ask for a photo ID or a video selfie.
Quick Guide: Your Situation and the Right Fix
Facebook asks for a login code only when it doesn’t recognize your device or browser.
| Situation | What to do | Typical time |
|---|---|---|
| SMS code never arrives | Wait, check signal and inbox space, request a new code | A few minutes |
| Lost phone, still logged in elsewhere | Approve the login from the signed-in device | Right away |
| Deleted authenticator app or changed number | Use Try another way, a recovery code or a security key | Right away, if a backup exists |
| No backup method works | Request identity confirmation (photo ID, or video selfie where offered) | Typically 1–2 business days per Meta, sometimes longer |
| A hacker turned on 2FA | Start at facebook.com/hacked on a familiar device | Varies by case |
Try Every Option on the Login Code Screen
When Facebook asks for the six-digit code, work through these options:
- Give SMS a few minutes. Carriers sometimes delay texts. Check that you have signal, your inbox isn’t full, and texts from Facebook aren’t turned off.
- Open the other methods. Look for Try another way or Need another way to authenticate? (wording varies by app and browser). Facebook lists the methods you set up, such as an authentication app, text message, security key or recovery code.
- Approve from a logged-in device. If you are still signed in on another phone, tablet or browser, check your Facebook notifications there. You may see a prompt to approve the login without a code.
- Enter a recovery code. If you saved the 10 one-time recovery codes Facebook offers, type one in place of the login code. Our guide to two-factor authentication backup codes explains where people usually find them.
- Use your security key. If you registered a USB or NFC key, insert or tap it in a supported browser such as Chrome, Firefox, Edge or Safari.
- Recover the authenticator. On a new phone, check whether the old phone still works or your authenticator app has a backup or transfer option. Set the phone’s clock to automatic, because time-based codes fail when it drifts.
Why a familiar device and network matter
Meta says its systems recognize the device you usually use and familiar locations. A browser you saved during setup may skip the code, while private browsing asks every time. Try your usual phone or home computer, on your home Wi-Fi, with any VPN off.
When Nothing Works: Confirm Your Identity
If no method works, ask Facebook to confirm your identity. Meta’s help center lists these links on the login code screen:
- Computer: click Need another way to authenticate?, then Other Options, then Get more help.
- Android or mobile web: tap Having trouble?
- iPhone or iPad: tap Need help?
Without your phone at all, look for I don’t have my phone. This process isn’t available in Facebook Lite, so use the full app or a web browser.
You may be asked to upload a photo of a government ID such as a driver’s license or passport, answer questions about the account, or record a short video selfie. Where offered, Meta compares the selfie with the account’s profile photos and says it deletes the facial data afterward. Send only the documents requested, since Meta notes extras may delay the review. If your ID keeps coming back, see what to do when Facebook ID verification is stuck or rejected.
Meta says you will typically receive instructions within 1–2 business days at the email or phone number on the account, but some reviews take longer. If you also lost that email or number, read our guide to recovering a Facebook account without email or phone.
If a Hacker Turned On Two-Factor Authentication
Meta lists a two-factor method that suddenly stops working as one sign of a hacked account. If you never set up 2FA, or codes go to an app or number you don’t own, someone else likely turned it on.
- On a device you have used to log in before, go to facebook.com/hacked and follow the prompts.
- Check your inbox for Facebook security emails. If your email address was changed, Facebook sends the previous address a link to reverse the change.
- Once back in, remove any phone number, authentication app or security key you don’t recognize, change your password and add your own two-factor method.
- Open Where you’re logged in under Password and security in Accounts Center and log out unknown devices.
- If you manage a Page or business portfolio, review admins and ad accounts. Meta has a separate form for recovering a hacked Page.
If the attacker also replaced your login details, read what to do when a hacker changed your Facebook email and password and our guide to recovering a hacked Facebook account.
Set Up Two-Factor Authentication So This Never Happens Again
Once logged in, click your profile picture, then Settings & privacy, Settings, Accounts Center, Password and security and Two-factor authentication. Some people now see Meta Account settings instead of Accounts Center; the path is similar.
- Use two methods. Pair an authentication app with a security key or text messages, so losing one device doesn’t lock you out.
- Save recovery codes. Under Additional methods, choose Recovery codes, then Get new codes. Print them or keep them in a password manager, not only on your phone.
- Back up your authenticator. Turn on the app’s backup or sync feature, and move accounts before you wipe an old phone.
- Keep contact details current. Update your phone number and email before you switch carriers or retire an address.
When to Get Professional Help
If identity confirmation keeps failing, or the account runs a Page, ads or a business portfolio that cannot sit idle, a structured case can help. AccRevert reviews the case, organizes the ownership evidence and prepares a documented request or appeal that is submitted through the platform’s official channels. AccRevert is independent of Meta and cannot promise an outcome. See how our 2FA and authenticator lockout recovery service works.
A flat $299 case-preparation fee opens a case; a success fee of $599 for personal accounts, $999 for business accounts or $1,199 for Business Manager and ad accounts applies only if access is restored. Payment is by PayPal only.
Frequently Asked Questions
How long does Facebook take to review an identity confirmation?
Meta’s help center says you will typically get instructions within 1–2 business days by email or text, though some reviews take longer. Resending the same request usually doesn’t speed things up.
Can I turn off two-factor authentication without logging in?
No. Two-factor settings live in Accounts Center, which you can only reach after logging in, so you first need a backup method or identity confirmation.
I got a new phone and my authenticator app is empty. What now?
Check whether the old phone still works or your app can restore a backup. If not, use a recovery code, approve from a logged-in device or request identity confirmation.
What if I don’t see any help link on the code screen?
Update the Facebook app or switch to a web browser on a device you have used before. Identity confirmation isn’t available in Facebook Lite.
Final Checklist
- Try every method behind Try another way.
- Check signed-in devices for an approval prompt.
- Use a familiar device, browser and network.
- Submit one clear ID or video selfie, then wait.
- If hacked, start at facebook.com/hacked.
- Save recovery codes and add a second method.
Still locked out by two-factor authentication? Open your recovery case with AccRevert: a flat $299 case-preparation fee starts the work, and the success fee ($599 personal, $999 business, $1,199 Business Manager or ad account) applies only if access is restored.
Related Articles
Stop guessing and document the case properly.
Our team can review the account history, available ownership evidence and the recovery steps already attempted.
Facebook Decision Is Final? What You Can Still Do
Hacker Ran Ads on My Facebook Account? How to Stop the Charges
