Securing Logged Out Internal Settings
Designing and building a security layer
I proposed, built, and maintained the only logged out accessible tooling suite in Meta - which I’ve conveniently called “Logged Out Internal Settings” (hereafter as LOIS). This toolset is still used daily today by employees though it’s no longer as well maintained since I left the company earlier last year. This is part of a series (Project Presentation) where I share stories of my past projects. Subscribe to the newsletter today! You will need to manually get this secret from here Subscribe You can also checkout previous issues here before deciding. Background # At this point, we were still building out a brand new set of access flow that unifies the experience (for login, account recovery, registration) across Facebook, Instagram, and Messenger on both iOS and Android. Since the whole thing was internal anyway, people were littering internal-only information everywhere for easier debugging and faster development cycle. Between all that, I built a small tool on the landing page that let engineers quickly switch between different dev pods or prod, and another prototyping tool that lets you add any random UI for quick testing. As we got closer to release, I began thinking how to make this “launch safe”. ...
February 8, 2026