Sliding Testimonials
Slide Left
Slide Right



Facebook Security Tips


November 21st, 2011

3 Easy to do Facebook Security Tweaks

Phishing Comments Example
This is an example of malicious comments posted by a criminal. They are being posted by this Facebook user’s actual friends. They had their information compromised through phishing. The links go to phishing websites and malicious advertising. (click this image to enlarge)

I’m often asked how to stay safe on Facebook. There have also been a colossal number of security breaches of Facebook in recent weeks. What often happens when having your Facebook compromised is that an overseas “hacker” will steal your account information, login to your account, and then run scripts which make advertising posts and perform other malicious activities. It’s important to note that these “hackers” are often not actual persons. There are automated programs that perform these tasks. Below is an example of malicious activities they perform, followed by ways to keep yourself, family and friends safe.

Facebook Security Breach Example: Phishing

A Fake Facebook Page Used for Phishing
This is an example of a fake Facebook website which could be utilized to trick you into logging in. This technique is known as phishing and is used to steal Bank account information as well. Always be sure to check the URL in the address bar to ensure you are on the real website. (click image to enlarge it)

Phishing is a tech-security term for a technique malicious webmasters’ use to steal your account login information. Phishing works like this: you are baited with a link to a website, the URL and webpage are structured to resemble another website you use (e.g., Facebook, Twitter, YouTube), you are asked to login to the website, you login to the fake website, and then the criminals have made their catch. Typically they’ll auto forward you to the real website. At this point they’ve stored your login information in their database which they’ll later use to login to your account and perform malicious activities. This technique is often used to steal Facebook users account information. To avoid being phished make sure you always identify the URL of the website you are using in your address bar. For example, currently you may be (i.e., if viewing this blog at webventuresplus.com) viewing webventuresplus.com/online-security/facebook-security-tips/. If this were a phishing website tailored to mimic the real website, the URL may appear as webventuresplus.com.thisisnotwebventuresplus.com/online-security/facebook-security-tips/. Most browsers today, as well as virus protection programs have built in protections against phishing, but they are not always effective and, hence, it’s important to always check the URL yourself.

Staying Safe on Facebook – 3 Critical Tips

In Facebook >> click on the arrow next to the Home button on the upper right hand side of the website >> click account settings >> then click on the Security link on the left hand side of the page.

  1. Security Question: enable a security question for your account. This will add a secondary level of security verification when you login to Facebook. If you visit a phishing website it’s unlikely they’ll ask you this question. They may obtain your email and password, but they won’t be able to login to your account.
  2. Secure Browsing: enable secure browsing when on Facebook. This will force Facebook to only display pages on Facebook in an HTTPS format. This format protects your data from being captured and/or spied on by third parties. It will encrypt information you type and view on Facebook.
  3. Login Notification and Login Approvals: enabling these features will notify you when someone logs into your account from an unrecognized location/computer. This is great for catching snooping family members and/or malicious webmasters.

We’ll have more information on how to keep your Facebook safe in the coming weeks. If you have any questions please visit our contact page or leave a comment on this post.

By: Jonathan Gibbons
Web Ventures Plus
Owner & Chief Webmaster