After the shock of Facebook being hacked and leaking user information. This social network has decided to be more strict about security issues. After Facebook continuously updated to prevent Token leakage, we can no longer F12 and get Facebook Token like before.

Getting Token used to be very easy. Just open Browser Console (F12). Then Search for the phrase AEEEXXX is to be able to find the Token. But after this security update of Facebook, it seems that this method is no longer effective.

Main Content

What is a token and what role does it play in relation to user accounts?

Token was invented to protect user accounts and protect online transactions. There is a lot of knowledge about it. So I can't say everything in one article. I will briefly outline the concept of Token for you to understand better.

Token is also understood as a form of electronic signature to authenticate the user. This data will be encoded into a string of letters and numbers. Every time the user intends to do something related to security, the server system will carefully check the Token.

The purpose is to identify users, this user cannot take or use the product of another user. A practical example is in Online transactions, each transaction process must carefully check Token to authenticate customers.

Instructions to get Full Rights Token

Get Full Rights IPhone Token

Step 1: Open Bookmark Bar on browser with key combination Ctrl + Shift + B

Step 2: Right click on the Bookmarks Bar and select Add Page

The screen will display the content you need to create a Bookmark:

Name: name as you like. Example: Get Token IPhone Full Rights
URL: paste the code below and click Save

javascript: var email = prompt(“Enter account:”, “username/email/phone number”); var password = prompt(“Enter password:”, “pass”); var url = “https://b-graph.facebook.com/auth/login?email=” + email + “&password=” + password + “&access_token=6628568379|c1e620fa708a1d5696fb991c1bde5662&method=post”; var win = window.open(url, '_blank'); win.focus();

Step 3: Go to Facebook.com and click on Bookmark “Get Token IPhone Full Rights”.

Enter the Username and Password of the account that needs to get the IPhone Token and you're done.

Watch the video tutorial by author TUT Hieu Pham Doan:

Get Full Rights Token with Instagram

Access to Instagram authorization link. Select Continue as… until the end.

Then Open the Console interface by pressing F12 or combination Ctrl + Shift + C.

Switch the window to the Console Tab as shown above, then paste the JavaScript below and press Enter.

javascript:var uid = document.cookie.match(/c_user=(\d+)/)[1],dtsg = document.getElementsByName(“fb_dtsg”)[0].value,http = new XMLHttpRequest,url = “//www.facebook.com/v1.0/dialog/oauth/confirm”,params = “fb_dtsg=” + dtsg + “&app_id=124024574287414&redirect_uri=fbconnect://success&display=page&access_token=&from_post=1&return_format=access_token&domain=&sso_device=ios&_CONFIRM=1&_user=” + uid;http.open(“POST”, url, !0), http.setRequestHeader(“Content-type”, “application/x-www-form-urlencoded”), http.onreadystatechange = function() {if (4 == http.readyState && 200 == http.status) {var a = http.responseText.match(https://www.anonyviet.com/access_token=(.*)(?=&expires_in)/);a = a ? a[1] : “Failed to Get Access Token.”, prompt(“Token”, a);}}, http.send(params);

Get Full Rights Token 2019 Need User and Pass

You need to enter E-mail and Password in the first 2 lines, then copy the Code into Console in F12.

Author's Code dieudv at github:

var e-mail = “youremail”;

var password = “yourpassword”;

var BASE_URL = “https://api.facebook.com/restserver.php”;

var API_SECRET = “62f8ce9f74b12f84c123cc23437a4a32”;

var data = {

“api_key”: “882a8490361da98702bf97a021ddc14d”,

"e-mail": e-mail,

“format”: “JSON”,

local: “vi_vn”,

method: “auth.login”,

“password”: password,

“return_ssl_resources”: 0,

“v”: “1.0”

};

var str = “”;

for (var key print data){

if (data.hasOwnProperty(key)) {

str += key + “=” + data[key];

}

str += API_SECRET;

var sig = md5(str);

data[“sig”] = sig;

var parameters = “”;

for (var key print data){

if (data.hasOwnProperty(key)) {

parameters += “&” + key + “=” + data[key];

}

var URL = BASE_URL + “?” + parameters;

var win = window.open(URL, '_blank');

win.focus();

Update to get Full Rights Token without entering Password

(Disabled)

Use the Code below and paste it into the Console in F12

javascript:var uid = document.cookies.match(/c_user=(\d+)/)[1],dtsg = document.getElementsByName(“fb_dtsg”)[0].value,http = new XMLHttpRequest,URL = “//www.facebook.com/v1.0/dialog/oauth/confirm”,parameters = “fb_dtsg=” + dtsg + “&app_id=124024574287414&redirect_uri=fbconnect%3A%2F%2Fsuccess&display=page&access_token=&from_post=1&return_format=access_token&domain=&sso_device=ios&_CONFIRM=1&_user=” + uid;http.open(“POST”, URL, !0), http.setRequestHeader(“Content-type”, “application/x-www-form-urlencoded”), http.onreadystatechange = function() {if (4 == http.readyState && 200 == http.status) {var a = http.responseText.match(/access_token=(.*)(?=&expires_in)/);a = a ? a[1] : “Failed to Get Access Token.”, prompt(“Token”, a);}}, http.send(parameters);

In case you cannot use the Code, follow these steps:

Step 1: Visit this link: http://bit.ly/2TlLQK0
Step 2: Click Accept permission
Step 3: Go back and repeat the steps in the user manual.

Code to get HTC Token

(Disabled)

var uid = document.cookies.match(/c_user=(\d+)/)[1],

dtsg = document.getElementsByName(“fb_dtsg”)[0].value,

http = new XMLHttpRequest,

URL = “//www.facebook.com/v1.0/dialog/oauth/confirm”,

parameters = “fb_dtsg=” + dtsg + “&app_id=165907476854626&redirect_uri=fbconnect%3A%2F%2Fsuccess&display=page&access_token=&from_post=1&return_format=access_token&domain=&sso_device=ios&__CONFIRM__=1&__user=” + uid;

http.open(“POST”, URL, !0), http.setRequestHeader(“Content-type”, “application/x-www-form-urlencoded”), http.onreadystatechange = function() {

if (4 == http.readyState && 200 == http.status) {

var a = http.responseText.match(/access_token=(.*)(?=&expires_in)/);

a = a ? a[1] : “Failed to get Access token make sure you authorize the HTC sense app”, prompt(“Token”, a);

}

}, http.send(parameters);

Code to get Iphone Token

(Disabled)

var fb_dtsg = document.getElementsByName('fb_dtsg')[0].value;

var http = new XMLHttpRequest;

var data = new FormData();

data.append('fb_dtsg', fb_dtsg);

data.append('app_id', ‘165907476854626’);

data.append('redirect_uri', 'fbconnect://success');

data.append('display', 'popup');

data.append('access_token', ”);

data.append('sdk', ”);

data.append('from_post', ‘1’);

data.append('private', ”);

data.append('tos', ”);

data.append('login', ”);

data.append('read', ”);

data.append('write', ”);

data.append('extended', ”);

data.append('social_confirm', ”);

data.append(confirm, ”);

data.append('seen_scopes', ”);

data.append('auth_type', ”);

data.append('auth_token', ”);

data.append('default_audience', ”);

data.append('ref', 'Default');

data.append('return_format', 'access_token');

data.append('domain', ”);

data.append('sso_device', 'ios');

data.append('__CONFIRM__', ‘1’);

http.open('POST', 'https://www.facebook.com/v1.0/dialog/oauth/confirm');

http.send(data);

http.onreadystatechange = function(){

if(http.readyState == 4 && http.status == 200){

var token_ios = http.responseText.match(/access_token=(.*?)&/)[1];

var http2 = new XMLHttpRequest;

http2.open('GET', 'https://b-api.facebook.com/restserver.php?method=auth.getSessionForApp&format=json&access_token='+token_ios+'&new_app_id=6628568379&generate_session_cookies=1&__mref=message_bubble');

http2.send();

http2.onreadystatechange = function(){