Nettsikkerhet
Detaljer om retningslinjer
ENDRINGSLOGG
I dag
Bakgrunn for retningslinjene
Vi anerkjenner at sikkerheten til brukerne våre omfatter å beskytte personopplysninger, kontoer, profiler og andre Meta-enheter de administrerer, i tillegg til produktene og tjenestene våre i bredere omfang. Når noen forsøker å få tak i sensitive personopplysninger eller skaffe seg uautorisert tilgang på måter som er bedragerske eller krenker individet, er det skadelig for den autentiske, åpne og trygge atmosfæren vi ønsker å skape.
Vi tillater ikke følgende:
forsøk på å kompromittere eller få tilgang til kontoer via uautoriserte metoder, inkludert
- å skaffe seg tilgang til kontoer, profiler eller andre Meta-enheter som tilhører andre, gjennom bedragerske metoder eller uten uttrykkelig tillatelse fra eieren av kontoen, profilen eller enheten
- å innhente, skaffe seg eller be om en annen brukes innloggingsinformasjon, personopplysninger eller annen sensitiv brukerinformasjon for å skaffe seg uautorisert tilgang, inkludert gjennom følgende taktikker:
- phishing, definert som å innlede kommunikasjon eller opprette nettsteder som er laget for å se ut som mer tiltrodde eller vel ansette kommunikasjoner eller nettsteder med det formål å på bedragersk vis anskaffe sensitiv brukerinformasjon
- sosial manipulering, for eksempel gjentatte eller vedvarende forsøk på å høste inn eller anskaffe svar på vanlige gjenopprettingsspørsmål for kontoer eller passord
- skadelig programvare, gråprogramvare, spionprogramvare eller annen skadelig kode, som bekrevet nedenfor
forsøk på å dele, utvikle, være vert for eller distribuere ondsinnet eller skadelig kode, inkludert
- å oppmuntre eller lure brukere til å laste ned eller kjøre filer, apper eller programmer som kan utgjøre en fare for en brukers internett- eller datasikkerhet, inkludert, men ikke begrenset til
- skadelig programvare, definert som kode eller programvare som er laget for å skade eller skaffe seg uautorisert tilgang til systemer. Dette inkluderer programmer som er laget for å skade datasystemer, samt programvare som er laget for å få penger fra ofrene, for eksempel løsepengevirus.
- spionprogramvare, definert som kode eller programvare som samler inn data om brukere og sender dem til tredjeparter uten brukernes informerte samtykke, eller som bruker dataene for ulovlige formål (f.eks. seksuell utpressing, annen utpressing eller ulovlig tilgang til systemer)
- gråprogramvare, definert som kode eller programvare som skaper problemer for eller reduserer verdien av bruken av maskinvare eller programvare, og som kan være vanskelig å fjerne fra datasystemer eller -nettverk
- å opprette, dele eller være vert for skadelig programvare, deriblant nettleserutvidelser og mobilapper, på eller utenfor plattformen, som setter brukerne eller produktene og tjenestene våre i fare
- true, innrømme eller muliggjøre hacking – inkludert ved å dele eller annonsere programvare, kurs eller produkter som gjør det mulig for folk å omgå sikkerhetssystemer, inkludert programvare som oppfordrer til hacking av programvare eller innloggingsinformasjon
- å tilby nettbasert infrastruktur, herunder webhoteller, domeneservere og annonsenettverk som muliggjør støtende lenker, slik at flertallet av disse lenkene på tjenestene våre bryter med punktene om spam eller nettsikkerhet i fellesskapsstandardene
26. jun. 2025
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Meta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
- Accessing accounts, profiles, or other Meta entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
- Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
- Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
- Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
- Malware, Greyware, Spyware or other malicious code, as described below.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
- Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
- Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
- Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
- Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
- Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
- Threatening, admitting to, or enabling hacking - Including by
Ssharing or advertising software, courses, or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords,or credentials - Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on our services violate the spam or cybersecurity sections of the Community Standards.
This policy has been updated to reflect the consolidation of all existing policies related to malicious hacking under the Cybersecurity policy.
2. okt. 2024
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other FacebookMeta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
- Accessing accounts, profiles, or other Meta
, Inc.,entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner. - Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
- Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
- Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
- Malware, Greyware, Spyware or other malicious code, as described below.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
- Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
- Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
- Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
- Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
- Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
- Sharing or advertising software or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
- Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on
Facebook or Instagramour services violate the spam or cybersecurity sections of the Community Standards.
26. jun. 2024
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Facebook entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive userpersonalinformation or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user personalinformation or engage in unauthorized access through the abuse of our platform, products, or services.
Attempts to compromise or access accounts via unauthorized means, including:
- Accessing accounts, profiles, or other Meta, Inc., entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
- Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
- Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
- Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
- Malware, Greyware, Spyware or other malicious code, as described below.
Gaining access to accounts, profiles Facebook, Inc. entities, or user data other than your own through deceptive means or without explicit permission from the account, profile, or entity owner.Attempting to obtain, acquire or request another user’s login credentials, personal information or other sensitive data - whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites) or the use of malicious software or websites.Publicly sharing your own or others’ login information, either on platform or through a third party service.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
Encouraging or deceiving users to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.- Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
- Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
- Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
- Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
- Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
- Sharing or advertising software or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
- Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the spam or cybersecurity sections of the Community Standards.
30. jun. 2022
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Meta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
Do not:
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, gather sensitive information through deceptive means, or attempt to engage in unauthorized access, including:
- Gaining access to accounts, profiles Facebook, Inc. entities, or user data other than your own through deceptive means or without explicit permission from the account, profile, or entity owner.
- Encouraging or deceiving users to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
- Attempting to obtain, acquire or request another user’s login credentials, personal information, or other sensitive
informationdata - whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites) or the use of malicious software or websites. - Publicly sharing your own or others’ login information, either on platform or through a third party service.
- Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
- Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the spam or cybersecurity sections of the Community Standards.
We are making minor clarifications to the policy to better reflect the types of deceptive links we remove, including deceptive links that lead elsewhere on our family of apps and services.
26. mar. 2021
Policy Rationale
We recognize that the safety of our users extends toincludes the security of their personal information and accounts and our services.accounts, profiles, and other Facebook entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster, and can be used to compromise user accounts and our services. Therefore, we do not allow attempts to gather sensitive user information through or engage in unauthorized accessthe abuse of our platform and products., and products, or services.
Do not:
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, or gather sensitive information through unauthorizeddeceptive means,, or attempt to engage in unauthorized access,defined as:including:
- Gaining access to
anyaccounts , profiles, Facebook, Inc. entities, or user data other than your ownthrough deceptive means or without explicit permission from the account, profile, or entity owner. - Encouraging or deceiving users
and entitiesto download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites.. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network. - Attempting to obtain, acquire
Acquiringor requestinganother user’s login credentialsor other sensitive information, , whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites)or the use of malicious software or websites.. Attempting to obtain the sensitive information of others such as usernames, passwords, or other personal information, through deceptive means or the use of malicious software or websites.- Publicly sharing your own or others’ login information, either on platform or through a third party service.
Creating, sharing, or hosting malicious software or malicious browser extensions to compromise accounts or gain access to user data.- Creating, sharing, or hosting malicious software browser extensions and mobile applications, on or off platform that put our users or products and services at risk.
- Providing online infrastructure, including Web Hosting Services, Domain Name System servers, and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the Spam or Cybersecurity sections of the Community Standards.
17. des. 2020
Section 19: Cybersecurity:
Policy Rationale
We recognize that the safety of our users extends to the security of their personal information and accounts and our services. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster, and can be used to compromise user accounts and our services. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
30. okt. 2019
Section 19: Cybersecurity (New):
Policy Rationale
We recognize that the safety of our users extends to the security of their personal information. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
Do not:
Attempt to compromise user accounts or gather sensitive information through unauthorized means, defined as:
- Gaining access to any account or user data other than your own without explicit permission from the account owner.
- Encouraging or deceiving users and entities to download or run files or programs that will compromise a user’s online or data security. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
- Acquiring or requesting another user’s login credentials, whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites).
- Attempting to obtain the sensitive information of others such as usernames, passwords, or other personal information, through deceptive means or the use of malicious software or websites.
- Publicly sharing your own or others’ login information on platform or through a third party service.
- Creating, sharing, or hosting malicious software or malicious browser extensions to compromise accounts or gain access to user data.
- Providing online infrastructure, including Web Hosting Services, Domain Name System servers, and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the Spam or Cybersecurity sections of the Community Standards.
Brukeropplevelser
Se noen eksempler på hvordan tiltak kan se ut på Facebook, for eksempel hvordan man kan rapportere noe man mener ikke burde være på Facebook, få beskjed om at man har brutt fellesskapsstandardene, og hvordan det oppleves å se en advarselsskjerm over en bestemt type innhold.
Merk: Vi forbedrer oss hele tiden, så det du ser her, kan være noe utdatert sammenlignet med det som for øyeblikket er i bruk.
BRUKEROPPLEVELSE
Rapportering
BRUKEROPPLEVELSE
Kommunikasjon etter rapportering
BRUKEROPPLEVELSE
Opplevelse av fjerning av innhold
BRUKEROPPLEVELSE
Advarselsskjermer
Håndhevelse
Vi har de samme retningslinjene over hele verden for alle på Facebook.
Gjennomgangsteam
Vårt globale team bestående av over 15 000 kontrollører jobber hardt hver dag for at alle på Facebook skal være trygge.
Involvering av interessenter
Eksterne eksperter, akademikere, ikke-statlige organisasjoner og beslutningstakere bidrar til å utforme Facebooks fellesskapsstandarder.
Få hjelp med nettsikkerhet
Finn ut hva du kan gjøre hvis du ser noe på Facebook som bryter fellesskapsstandardene våre.
Besøk hjelpesenteret vårt