Translate

Tuesday, 1 October 2013

New Tools to Secure a Compromised Account

In our continued battle against cyber criminals, one of the biggest challenges we face is helping people whose accounts have been compromised by spammers understand how it happened and how to fix the problem. The vast majority of people who use Facebook have never experienced a security problem. For the small number who do, knowing how to fight back is key.

It can be an embarrassing experience to log in to Facebook to find that unauthorized messages have been sent from your account and then face questions from friends who have received spam from you. 

We've spent the last few months improving the way to guide people through the process of regaining access to their account after it's been compromised and used to send spam. Currently, we send emails explaining what happened and provide links to remedy the situation. Now we're moving towards a new model that also involves clear and simple steps taken within Facebook itself. In doing so, we can ensure that the person logging in is the true owner of the account, thereby preventing hackers from using it to send spam in the future.

Going forward, we'll continue to send a notification email to the tiny percentage of people whose Facebook accounts have been compromised. What's new is that when these people try to access the site, they'll first see a page explaining what happened, as shown below.

Next, they'll go through a quick verification process to ensure that they're the legitimate owner of the account in question. Finally, we'll help them pick a new, secure password and refer them to the Facebook Security Page, which includes helpful tips and information on how to be safe on Facebook and across the Internet.

This new change will help us not only fight spam, but also spread the word about security on Facebook. In the coming months, we'll be rolling out similar processes to address the different threats people may face. Our teams are working hard to make sure you never experience a security issue on Facebook, and in the rare case that you do, we're committed to making the process of regaining control of your account easy and informative.

No comments:

Post a Comment