You are fully responsible for keeping your Facebook password secure and for everything that happens under your account. If someone else uses your account because you didn't keep it secure, Meta is not responsible for any losses or harm that result.
If your Facebook account is hacked or misused, this clause means Meta bears no financial liability for the consequences — even if the breach occurred partly due to platform vulnerabilities — placing full responsibility on users to secure their own accounts.
Cross-platform context
See how other platforms handle User Responsibility for Account Security and similar clauses.
Compare across platforms →This provision shifts liability for account misuse entirely to the user — even in scenarios where a breach may result from platform-side security vulnerabilities — and limits Meta's financial exposure for account compromises regardless of cause.
REGULATORY FRAMEWORK: GDPR Art. 32 requires Meta as data controller to implement appropriate technical and organisational security measures, and GDPR Art. 82 provides users an independent right to compensation for security failures — rights that cannot be waived by this clause for EU users. The FTC Act Section 5 and the FTC's Safeguards Rule (16 CFR Part 314, applicable to financial institutions) set standards for reasonable security practices. State data breach notification laws (e.g., California Civil Code §1798.82, New York SHIELD Act, Gen. Bus. Law §899-aa) impose independent obligations on Meta that this clause does not affect. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.