I found out recently that Facebook supports 2-factor auth, which I’m a massive fan of. However, there are 2 drawbacks:
The first one is a pain, as I get unneccesary SMS messages.
The second one is a lie, and any compliant TOTP generator will work. Like the Google Authenticator App that I already use for my Google Accounts, AWS, etc…
However, provided you tell the facebook dialogs that you are struggling, they give you the infomation you want to set it up.