|
Facebook provides several features to enhance the desktop login experience:
| Feature | Desktop Implementation | Notes | |---------|------------------------|-------| | | Mandatory | Prevents MITM attacks; browser warns if certificate invalid. | | HTTP-only Cookies | c_user (user ID), xs (session secret) | Not accessible via JavaScript → mitigates XSS. | | Two-Factor Authentication (2FA) | TOTP (Google Authenticator), SMS, or security keys (WebAuthn) | WebAuthn requires USB/NFC security key or Windows Hello / macOS Touch ID. | | Login Approvals | Desktop browser prompts user to check “Was this you?” on known devices. | Integrates with Facebook’s mobile app for push approval. | | Code Generator | Desktop page offers recovery codes or prompts for third-party authenticator. | No native desktop authenticator app; relies on mobile or browser extension. | | Save Password (Browser) | Browser’s password manager populates fields. | Not controlled by Facebook; user beware of shared computers. | | Login Notifications | Email or mobile push for new desktop logins. | User can review active sessions in Settings. | facebook login desktop