You already have to login with a username and password to access Facebook, unlike whatsapp where your phone is the sole key. Facebook could just construct the key at logon time based on the user's password.