Cybersäkerhet
Policyinformation
ÄNDRINGSLOGG
Idag
Motivering för policyn
Vi är medvetna om att våra användares säkerhet omfattar säkerheten för deras personuppgifter, konton, profiler och andra Meta-enheter de kanske hanterar, samt för våra produkter och tjänster i ett bredare perspektiv. Försök att samla in känsliga personuppgifter eller få obehörig åtkomst med bedrägliga eller invasiva metoder är skadligt för den autentiska, öppna och trygga atmosfär som vi vill främja.
Vi tillåter inte:
Försök att göra intrång eller komma åt konton på obehörigt sätt, inklusive:
- Skaffa sig åtkomst till konton, profiler eller andra Meta-enheter som tillhör någon annan med bedrägliga metoder eller utan uttryckligt tillstånd från ägaren till kontot, profilen eller enheten.
- Skaffa sig, köpa eller begära tillgång till en annan användares inloggningsuppgifter, personuppgifter eller annan känslig användarinformation i syfte att få obehörig åtkomst. Detta kan inbegripa följande:
- Nätfiske, vilket definieras som en metod där man skapar meddelanden eller webbplatser som är utformade på ett sådant sätt att de ser ut som om de kommer från betrodda eller kända avsändare, i syfte att tillskansa sig känslig användarinformation på ett bedrägligt sätt.
- Social ingenjörskonst, vilket kan definieras som upprepade eller löpande försök att manipulera någon för att få svar på vanliga frågor som används för konto- eller lösenordsåterställning.
- Skadlig programvara, greyware, spionprogram och skadlig kod enligt beskrivningen nedan.
Försök att dela, utveckla, agera värd för eller sprida skadlig kod, inklusive:
- Uppmuntra eller lura användare att ladda ned eller köra filer, appar eller programvara som äventyrar en användares online- eller datasäkerhet, inklusive men inte begränsat till:
- Skadlig programvara, vilket definieras som programvara avsedd att skada eller ordna obehörig åtkomst till system. Detta inkluderar program avsedda att skada datorer eller utpressningstrojaner (ransomware) avsedda att pressa användare på pengar.
- Spionprogram, vilket definieras som kod eller programvara som samlar in data om användare och skickar dem till tredje part utan medgivande från användaren, eller som använder data till olagliga ändamål (till exempel utpressning, sexuell utpressning eller obehörig åtkomst till system).
- Greyware, vilket definieras som irriterande kod eller programvara som kan vara svår att få bort från en dator eller nätverk.
- Skapa, dela eller vara värd för skadliga programvaror, inklusive webbläsartillägg och mobilappar, på eller utanför plattformen, som utsätter våra användare, produkter eller tjänster för risker.
- Hot om, erkännande av eller möjliggörande av hackning – inklusive delning eller visning av annonser för programvara, kurser eller produkter som gör det möjligt för användare att kringgå säkerhetssystem, inklusive programvara som uppmuntrar till kapning av program eller inloggningsuppgifter.
- Tillhandahålla onlineinfrastruktur, inklusive webbhotell, DNS-servrar och annonsnätverk som möjliggör skadliga länkar så att en majoritet av dessa länkar på våra tjänster bryter mot avsnitten om skräppost eller cybersäkerhet i communityreglerna.
27 jun 2025
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Meta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
- Accessing accounts, profiles, or other Meta entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
- Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
- Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
- Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
- Malware, Greyware, Spyware or other malicious code, as described below.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
- Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
- Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
- Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
- Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
- Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
- Threatening, admitting to, or enabling hacking - Including by
Ssharing or advertising software, courses, or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords,or credentials - Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on our services violate the spam or cybersecurity sections of the Community Standards.
This policy has been updated to reflect the consolidation of all existing policies related to malicious hacking under the Cybersecurity policy.
3 okt 2024
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other FacebookMeta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
- Accessing accounts, profiles, or other Meta
, Inc.,entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner. - Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
- Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
- Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
- Malware, Greyware, Spyware or other malicious code, as described below.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
- Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
- Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
- Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
- Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
- Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
- Sharing or advertising software or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
- Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on
Facebook or Instagramour services violate the spam or cybersecurity sections of the Community Standards.
27 jun 2024
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Facebook entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive userpersonalinformation or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user personalinformation or engage in unauthorized access through the abuse of our platform, products, or services.
Attempts to compromise or access accounts via unauthorized means, including:
- Accessing accounts, profiles, or other Meta, Inc., entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
- Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
- Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
- Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
- Malware, Greyware, Spyware or other malicious code, as described below.
Gaining access to accounts, profiles Facebook, Inc. entities, or user data other than your own through deceptive means or without explicit permission from the account, profile, or entity owner.Attempting to obtain, acquire or request another user’s login credentials, personal information or other sensitive data - whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites) or the use of malicious software or websites.Publicly sharing your own or others’ login information, either on platform or through a third party service.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
Encouraging or deceiving users to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.- Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
- Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
- Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
- Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
- Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
- Sharing or advertising software or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
- Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the spam or cybersecurity sections of the Community Standards.
1 jul 2022
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Meta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
Do not:
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, gather sensitive information through deceptive means, or attempt to engage in unauthorized access, including:
- Gaining access to accounts, profiles Facebook, Inc. entities, or user data other than your own through deceptive means or without explicit permission from the account, profile, or entity owner.
- Encouraging or deceiving users to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
- Attempting to obtain, acquire or request another user’s login credentials, personal information, or other sensitive
informationdata - whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites) or the use of malicious software or websites. - Publicly sharing your own or others’ login information, either on platform or through a third party service.
- Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
- Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the spam or cybersecurity sections of the Community Standards.
We are making minor clarifications to the policy to better reflect the types of deceptive links we remove, including deceptive links that lead elsewhere on our family of apps and services.
27 mar 2021
Policy Rationale
We recognize that the safety of our users extends toincludes the security of their personal information and accounts and our services.accounts, profiles, and other Facebook entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster, and can be used to compromise user accounts and our services. Therefore, we do not allow attempts to gather sensitive user information through or engage in unauthorized accessthe abuse of our platform and products., and products, or services.
Do not:
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, or gather sensitive information through unauthorizeddeceptive means,, or attempt to engage in unauthorized access,defined as:including:
- Gaining access to
anyaccounts , profiles, Facebook, Inc. entities, or user data other than your ownthrough deceptive means or without explicit permission from the account, profile, or entity owner. - Encouraging or deceiving users
and entitiesto download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites.. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network. - Attempting to obtain, acquire
Acquiringor requestinganother user’s login credentialsor other sensitive information, , whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites)or the use of malicious software or websites.. Attempting to obtain the sensitive information of others such as usernames, passwords, or other personal information, through deceptive means or the use of malicious software or websites.- Publicly sharing your own or others’ login information, either on platform or through a third party service.
Creating, sharing, or hosting malicious software or malicious browser extensions to compromise accounts or gain access to user data.- Creating, sharing, or hosting malicious software browser extensions and mobile applications, on or off platform that put our users or products and services at risk.
- Providing online infrastructure, including Web Hosting Services, Domain Name System servers, and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the Spam or Cybersecurity sections of the Community Standards.
18 dec 2020
Section 19: Cybersecurity:
Policy Rationale
We recognize that the safety of our users extends to the security of their personal information and accounts and our services. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster, and can be used to compromise user accounts and our services. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
31 okt 2019
Section 19: Cybersecurity (New):
Policy Rationale
We recognize that the safety of our users extends to the security of their personal information. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
Do not:
Attempt to compromise user accounts or gather sensitive information through unauthorized means, defined as:
- Gaining access to any account or user data other than your own without explicit permission from the account owner.
- Encouraging or deceiving users and entities to download or run files or programs that will compromise a user’s online or data security. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
- Acquiring or requesting another user’s login credentials, whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites).
- Attempting to obtain the sensitive information of others such as usernames, passwords, or other personal information, through deceptive means or the use of malicious software or websites.
- Publicly sharing your own or others’ login information on platform or through a third party service.
- Creating, sharing, or hosting malicious software or malicious browser extensions to compromise accounts or gain access to user data.
- Providing online infrastructure, including Web Hosting Services, Domain Name System servers, and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the Spam or Cybersecurity sections of the Community Standards.
Användarupplevelser
Se några exempel på hur verkställigheten kan se ut för personer på Facebook, till exempel hur det ser ut när du anmäler något du inte tycker borde finnas på Facebook, hur du meddelas om att du brutit mot våra communityregler och hur en varningsskärm kan visas över visst innehåll.
Obs! Vi förbättrar ständigt vårt innehåll. Det innebär att det du ser här kan vara inaktuellt jämfört med det vi använder nu.
ANVÄNDARUPPLEVELSE
Anmälan
ANVÄNDARUPPLEVELSE
Kommunikation efter en anmälan
ANVÄNDARUPPLEVELSE
Borttagningsupplevelse
ANVÄNDARUPPLEVELSE
Varningsskärmar
Verkställighet
Vi har samma policyer i hela världen för alla som använder Facebook.
Granskningsteamen
Vårt globala team med över 15 000 granskare arbetar varje dag för att hålla de som använder Facebook säkra.
Interaktion med berörda parter
Utomstående experter, akademiker, ideella organisationer och beslutsfattare hjälper till att utforma Facebooks communityregler.
Få hjälp med cybersäkerhet
Läs om vad du kan göra om du ser något på Facebook som går emot våra communityregler.
Besök vårt hjälpcenter