Title: I &#x27;left&#x27; Facebook a couple of years ago, but only deactivated my profile at the time. Today I decided to delete it fully. Maybe I&#x27;m jumping on the bandwagon, but whatever, I&#x27;ve been meaning to do it for a while.<p>I went to log in but had forgotten that I used to use the Facebook app for 2-factor auth. I&#x27;ve also changed my phone number so I couldn&#x27;t receive a code via SMS. I do have the recovery codes [0] from when I set up 2-factor auth, but cannot find any part of the login process that will accept a recovery code.<p>I then received an email from Facebook saying &quot;Welcome Back to Facebook&quot;, telling me my account has been reactivated! Despite the fact that I never successfully logged in to my account. So apparently my profile is now back out there on Facebook, and there&#x27;s nothing I can do about it until I (somehow) gain access to the account.<p>There seem to be two huge flaws here:<p>1. Why can&#x27;t I log into my 2-factor protected account using saved recovery codes? That&#x27;s what they&#x27;re there for. (if anyone knows how to do this, please share!)<p>2. It seems anyone can reactivate a deactivated Facebook account by simply attempting to log in? <i>EDIT: Perhaps it reactivated because I gave a correct username and password, but it still shouldn&#x27;t do this until after the 2FA step</i><p>This seems like yet another dark UX pattern &#x2F; security flaw from Facebook.<p>Just another reason to #deleteFacebook... (if only I could)<p>[0] https:&#x2F;&#x2F;www.facebook.com&#x2F;help&#x2F;www&#x2F;148104135383285?helpref=faq_content&amp;rdrhc
Upvote: