Web Applications Stack Exchange is a question and answer site for power users of web applications. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Does Facebook only support HTTP or does it have HTTPS also?

share|improve this question
Check this facecrooks.com/blog/internet-safety-a-privacy/item/… – user8568 Feb 11 '11 at 23:39
Yes https://www.facebook.com/ – Colonel Panic Dec 23 '14 at 16:33
up vote 2 down vote accepted

As of July 2013, Facebook is https by default:

We now use https by default for all Facebook users. This feature, which we first introduced as an option two years ago, means that your browser is told to communicate with Facebook using a secure connection, as indicated by the "https" rather than "http" in [the URL]

However, the http interface remains

Some mobile phones and mobile carrier gateways don't fully support https. While we're working with the vendors of these products, we didn't want to leave https off entirely for affected users.

This is regrettable because it leaves possible the sslstrip attack whereby a man-in-the-middle rewrites https links to http, and serves a similar looking page at the http url. The solution is the HSTS header which tells the browser to always use https for a given site.

share|improve this answer

Yes - have a look at https://ssl.facebook.com/, however I do not think it is intended for use. All links from this site will redirect you back to non-SSL. I suppose it's grand if you want to check your live feed securely.

As a note: Going to https://www.facebook.com will throw a certificate error, so rather use the above link for access.

share|improve this answer
Why do they have that weird setup? – Michael Pryor Jun 30 '10 at 21:28
@Micheal - To be honest I've found it quite weird myself and am not sure at all. I don't think it's meant to be used though since all links redirect away from SSL. – Kyle Rozendo Jun 30 '10 at 21:31

Notice: This answer is now out of date.

This feature has become publicly available, however it is turned off by default.

To enable it, navigate to Account Settings > Account Security and check the HTTPS box.

share|improve this answer
Wow, why isn't this advertised more, or even... on by default... I think this is the correct answer! – fretje Feb 9 '11 at 11:11
Definitely the right answer. Thanks! – trip0d199 Feb 9 '11 at 13:59
More info: blog.facebook.com/blog.php?post=486790652130 – mark4o Feb 9 '11 at 17:02
Just note that SSL is not enabled on the login page, which almost defeats the whole point of enabling SSL. Read more here: digitalsociety.org/2011/02/… – musicfreak Feb 10 '11 at 19:30


That Firefox add-on will force SSL connections for Facebook, in addition to a growing number of other websites that support SSL (like wikipedia, google, meebo, etc). Future add-on updates will add support for additional sites.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.