A Facebook profile belongs to one person, and so does its number

What Facebook offers, in its words

• Facebook Help Center, on the three security methods

  “Tapping your security key on a compatible device. Using login codes from a third party authentication app. Using text message (SMS) codes from your mobile device.”

  https://www.facebook.com/help/148233965247823

• Facebook Help Center, on which number receives them

  “For text message (SMS) two-factor authentication, you can either add a new mobile number or use a number that's already been added to your account.”

  https://www.facebook.com/help/148233965247823

Facebook asks for the code “each time someone tries to access your Facebook from a browser or mobile device we don't recognize”, and it warns that privacy settings make that far more frequent than expected: “If you've turned on private browsing or set up your browser to clear your history every time it closes, you may need to enter a security code each time you log in” (Facebook). If you clear cookies on quit, the number under your account is not an emergency route — it is part of your daily login.

The ten codes to print before anything goes wrong

• Facebook Help Center, on recovery codes

  “If you've turned on two-factor authentication, you can get 10 recovery login codes to use when you're unable to use your mobile phone.”

  https://www.facebook.com/help/148104135383285

They are single-use — “You'll only be able to use each code once. If you run out of codes or lose them, you can request new ones by clicking Get new codes” — and they are generated from Settings → Accounts Center → Password and security → Two-factor authentication → Additional methods → Recovery codes (Facebook). Do this before you move, not after. Facebook's fallback when codes and phone are both gone is identity proof: “a photo of a government-issued ID (such as a driver's license or passport), answering security questions about your account” (Facebook).

Why a team can't share one profile's codes

• Facebook Help, on who profiles are for

  “Profiles are for individual use only. You can create a Page for a business, organization or idea.”

  https://www.facebook.com/help/112146705538576

A company Page is administered *through* people's own profiles, which is why the second factor on a profile is personal even when the Page is not. If what you are protecting is the Page, the right move is more than one admin, each with their own strong second factor — not one number that several people read. Meta Business Suite sets out which of Meta's phone checks belongs to the business and which belongs to an individual.

What Facebook publishes about number type

Nothing. Across the two-factor and recovery pages, Meta names delivery channels — security key, authenticator app, text message — and never mentions VoIP, virtual numbers or landlines. There is no rule to satisfy here and none to quote. What is true and checkable is the line itself: a Cleat number is a real US mobile line rather than an internet one, which is what a service's line-type check is looking at. What makes a number non-VoIP is the mechanism; nobody can promise a result.

Leaving the US with the account intact

1. 01Add a second method now — a passkey or an authenticator app — so the phone is not the only way in.
2. 02Generate the ten recovery codes and store them off the phone.
3. 03Decide which number you will still hold in a year, and put that one on the account while the old one still receives texts.
4. 04Check the rest: the services that re-check a number later will ask too, and some of them ask at the worst moment.
5. 05Only then let the old line lapse.

A number that has gone quiet is not neutral, either. Numbers are recycled back into circulation, which is why a number you keep paying for behaves differently from one you abandon.

Where a Cleat line fits

One case, and it is the common one: your own profile, after your US mobile number stops being yours. A Cleat line is a real US mobile number, not VoIP, held by one identity-verified person — you — with texts arriving in a web inbox, by email, in Telegram or on a webhook, from anywhere, at $24.99 a month. Cleat for expats is written for exactly that move, and keeping a US number abroad covers what else depends on it.

When Cleat is the wrong answer here

• A shared second factor for several people's profiles. Facebook says profiles are for individual use only. Give the Page more admins instead.
• A profile in a company's name. Meta's own rule again: a business gets a Page, not a profile.
• Recovering a profile Meta has disabled. That runs through Meta's review and government ID, and a different number changes nothing about it.
• Your only security method. Add a passkey or an authenticator app, and keep the recovery codes.

Keep reading

Instagram · WhatsApp · Google Account · Every service in this section