Security cookies protect accounts and enable recovery
Meta uses cookies to help keep your account, data and the Meta Products safe. Examples: identifying and applying extra security when someone may be trying to access an account without authorisation, for instance by rapidly guessing passwords; storing information that lets Meta recover your account if you forget your password; and requiring additional authentication if you tell Meta your account has been hacked. The 'sb' and 'dbln' cookies identify your browser securely. 'Datr' is a unique identifier for your browser that, among other things, helps protect from fraud, for example by helping identify trusted browsers where you have logged in before; it has a lifespan of 400 days.
Supporting quotations
We use cookies to help us keep your account
Cookies can help us identify and impose additional security measures when someone may be attempting to access a Facebook account without authorisation, for instance, by rapidly guessing different passwords. We also use cookies to store information that allows us to recover your account in the event that you forget your password or to require additional authentication if you tell us that your account has been hacked.
This includes, for example, our "sb" and "dbln" cookies, which enable us to identify your browser securely, as well as “datr." "Datr" is a unique identifier for your browser that, amongst other things, helps us protect you from fraud. For example, it helps us identify trusted browsers where you have logged in before. “Datr” has a lifespan of 400 days.
Qualifications & exceptions
'Datr' is described as a unique identifier for the browser, used 'amongst other things' for fraud protection, so fraud protection is not its only stated use.
Security & Safeguards · Company practice
Cookies used to combat spam, malware and policy violations
Meta uses cookies to combat activity that violates its policies or degrades its ability to provide the Meta Products. Examples: fighting spam and phishing by identifying computers used to create large numbers of fake accounts; detecting computers infected with malware and taking steps to prevent further harm; the 'csrf' cookie helps prevent cross-site request forgery attacks; and the 'datr' cookie helps identify browsers used by malicious actors and prevent cyber-security attacks such as a denial of service attack.
Supporting quotations
We also use cookies to combat activity
Cookies help us fight spam and phishing attacks by enabling us to identify computers that are used to create large numbers of fake Facebook accounts. We also use cookies to detect computers infected with malware and to take steps to prevent them from causing further harm.
Our "csrf" cookie, for example, helps us prevent cross-site request forgery attacks. The “datr” cookie also helps us to identify the browsers used by malicious actors and to prevent cyber-security attacks, such as a denial of service attack that could prevent you from accessing the Meta Products.
Security & Safeguards · Company practice
Cookies sb and dbln: secure browser identification, 400 days
The 'sb' and 'dbln' cookies help identify your browser securely; lifespan 400 days. Elsewhere Meta gives account-protection and recovery uses for them.
Supporting quotations
sb; dbln
These cookies help us to identify your browser securely.
400 days
"sb" and "dbln" cookies, which enable us to identify your browser securely
Security & Safeguards · Company practice
Cookie datr: browser identifier for fraud and attack protection, 400 days
The 'datr' cookie is a unique identifier for your browser that, among other things, helps protect against fraud and helps identify browsers used by malicious actors and prevent cyber-security attacks; lifespan 400 days. Elsewhere Meta says it helps identify trusted browsers where you have logged in before.
Supporting quotations
datr
This is a unique identifier for your browser that, among other things, helps us protect you from fraud. This cookie also helps us to identify browsers used by malicious actors and to prevent cyber-security attacks.
400 days
is a unique identifier for your browser that, amongst other things, helps us protect you from fraud. For example, it helps us identify trusted browsers where you have logged in before. “Datr” has a lifespan of 400 days.
Security, site and product integrity
Qualifications & exceptions
'Among other things' means fraud and attack protection are examples of its use, not its only stated uses.
Security & Safeguards · Company practice
Cookie csrf: account security, session lifespan
The 'csrf' cookie helps keep your account secure; its lifespan is listed as 'Session', meaning it lasts for the browser session. Elsewhere Meta says it helps prevent cross-site request forgery attacks.