Skip to main content

Business Information, Security, and Verification

Maintaining accurate business information, robust security measures, and proper verification is essential for protecting your Meta Business Manager account, unlocking advanced features, and ensuring compliance with Meta's policies. This section covers how to manage your business details, the importance of verification, identity and authentication setups, the Security Center, and best practices for admins. These elements help prevent unauthorized access, enable higher ad spending limits, and support seamless operations across Meta platforms. Always use official documents and keep information up-to-date to avoid delays or restrictions. Access most of these features via Business Settings or the Security Center in Meta Business Suite.

Business Info​

legal name, address, tax info

Your business information forms the foundation of your Meta Business Manager account, used for verification, payouts, and compliance. It includes details like your legal name, address, phone number, website, and tax information, which must match official records to prevent issues during verification or payments. Keeping this accurate helps Meta confirm your legitimacy and enables features like ad billing or Audience Network earnings.

Key Components:

  • Legal Name: The official registered name of your business (e.g., as on your incorporation documents). Avoid abbreviations or DBAs here unless they match legal records.
  • Business Address: A physical mailing address (not a P.O. box for verification purposes). Include street, city, state, ZIP code, and country.
  • Phone Number: A verifiable business phone capable of receiving calls or texts for confirmation codes.
  • Website: Your official domain (HTTPS preferred), which should display business details like name and contact info for verification matching.
  • Tax Info: Includes Tax ID (e.g., EIN in the US, VAT number elsewhere), required for payouts, ad billing, or tax forms like W-9/W-8BEN. For Meta Audience Network or ad revenue, submit forms via the Payouts section.

How to Update:

  1. Log in to Meta Business Suite at business.facebook.com.
  2. Go to Business Settings (gear icon) > Business Info or Business Portfolio Info.
  3. Click Edit next to the relevant section (e.g., My Info for name/email, Business Details for address/phone/website).
  4. Enter or update details—e.g., for tax info, navigate to Payments > Tax Information and upload forms if needed.
  5. Save changes; some updates (like name or country post-verification) may require re-verification and can't be changed freely.

Tips: Use a business email for communications. If you're a sole proprietor, your personal details may suffice, but consult tax advisors. Inaccurate info can lead to payout delays or account restrictions. For verified businesses, changes to core details like legal name or tax ID are limited to maintain integrity.

Business verification Requirement​

Business verification is Meta's process to confirm your business is legitimate, using official documents and details. It's not the same as getting a blue checkmark on Pages (that's Page verification) but focuses on the business portfolio level to enhance trust, security, and access to features. Verification helps prevent fraud and is increasingly required as Meta tightens policies.

Why It's Needed:

  • Unlock Advanced Features: Access higher ad spending limits (e.g., from $50/day to unlimited), create more ad accounts (up to 10+), use developer tools, or integrate WhatsApp Business API for higher tiers.
  • Compliance and Security: Required for sensitive ads (e.g., social/political), billing options, credit lines, or if Meta flags unusual activity. It reduces restrictions on new accounts and ensures adherence to privacy laws.
  • Business Growth: Essential for agencies managing clients, e-commerce with Shops, or high-budget campaigns. Without it, you may face spend caps, ad disapprovals, or limited asset sharing.

When It's Needed:

  • Prompted by Meta (e.g., via notifications for "Verification Required" when logging in or running ads).
  • For scaling: If you're hitting spend limits, using WhatsApp for business, or advertising regulated topics.
  • Not every account needs it immediately—small businesses or low-spend users may operate without, but it's recommended for future-proofing.

Overview of Process:

  1. Go to Security Center > Start Verification.
  2. Enter business details (name, address, phone, website—must match docs).
  3. Choose method: Phone/email code, domain verification, or upload documents (e.g., business license, utility bill, tax forms).
  4. Submit for review (1-14 days; check status in Settings).
  5. If rejected, appeal with better docs.

Eligibility: Must be the portfolio owner with accurate info. Start early to avoid campaign interruptions.

Identity confirmation & 2FA​

Identity confirmation and two-factor authentication (2FA) are key security layers in Meta Business Manager, ensuring only authorized users access your portfolio. Identity confirmation verifies who you are (e.g., via ID docs), while 2FA adds a second step beyond passwords for login. These protect against hacks, especially for admins handling sensitive assets.

Identity Confirmation:

  • Required for certain ads (e.g., social issues, elections) or if Meta suspects issues.
  • Process: In Settings > Security and Login > Confirm Identity. Upload government ID (e.g., passport, driver's license) or business docs. Meta reviews and notifies you.
  • Why: Confirms you're a real person/business, preventing fake accounts.

Two-Factor Authentication (2FA):

  • A code sent via app, text, or email each login, even after password entry.
  • Setup:
    1. Go to Meta Business Suite > Settings > Business Portfolio Info > Business Options.
    2. Under Two-Factor Authentication, click the dropdown > Require for Everyone (or select users).
    3. Choose method: Authenticator app (e.g., Google Authenticator—recommended), SMS, or security key.
    4. Follow prompts to verify and save backup codes.
  • For managed Meta accounts: Access via work.meta.com/accounts_center > Security > Two-Factor Authentication.
  • Troubleshooting: If codes don't arrive, check phone/email settings or use recovery codes. For lost access, submit identity review via support.

Enable 2FA immediately—it's mandatory for high-security features and can be enforced portfolio-wide to block non-compliant users.

Security Center overview​

The Security Center in Meta Business Manager is a dedicated hub for monitoring and enhancing your account's protection. It centralizes tools for verification, authentication, and risk management, helping safeguard assets like Pages, ad accounts, and data from threats. Accessible via Meta Business Suite, it's designed for admins to proactively address vulnerabilities.

Key Features:

  • Business Verification: Start or check verification status here to unlock features (see 6.2).
  • Two-Factor Authentication Management: Enable, enforce, or troubleshoot 2FA for users.
  • Account Health and Alerts: View security scores, recent logins, and notifications for suspicious activity.
  • Access Controls: Review and revoke user/partner permissions; manage domain verification for ad safety.
  • Activity Logs: Audit changes to settings, assets, or logins for compliance.
  • Additional Tools: Domain verification, brand safety settings, and resources for hacking recovery.

How to Access:

  1. In Meta Business Suite, go to Settings > Security Center (left menu).
  2. Explore sections like Verification, Authentication, or Security Checks.
  3. Use prompts to fix issues, e.g., "Start Verification" or "Enable 2FA."

The center emphasizes prevention—regular visits can improve your security posture and reduce hack risks.

Admin and Security Best Practices​

As an admin in Meta Business Manager, you hold the keys to your business's digital assets, so following security best practices is vital to prevent breaches, data loss, or account disables. These guidelines focus on proactive management, regular audits, and minimal access principles.

Core Best Practices:

  • Enforce 2FA: Require it for all users via Business Options; remove non-compliant access.
  • Limit Admins and Access: Use least privilege—grant employee roles over full control; remove ex-employees immediately.
  • Regular Audits: Every 90 days, review People/Partners lists; close inactive ad accounts; check activity logs for anomalies.
  • Secure Credentials: Use strong, unique passwords; avoid public email domains for users; enable login alerts.
  • Asset Management: Group assets logically; verify domains; remove unused integrations or apps.
  • Backup and Recovery: Have multiple admins; store backup codes securely; prepare for hacks by knowing Meta's support paths.
  • Compliance: Align with policies—e.g., no shared logins; use Business Manager instead of personal accounts.

For agencies: Conduct quarterly access reviews and use partner sharing. Monitor Security Center scores and act on recommendations. If hacked, change passwords, revoke access, and report to Meta. These habits minimize risks and support scalable, secure operations.