Quick answer: Two-factor authentication (2FA) is a security method that asks for two different proofs of identity when you sign in, usually your password plus a code or approval from your phone.
How It Works
Normally you prove who you are with something you know, your password. 2FA adds something you have, such as your phone, or something you are, such as a fingerprint. Even if a criminal learns your password, they still cannot get in without the second item.
Common Types of 2FA
- SMS codes: a code is texted to your phone. Convenient, but weaker than other options.
- Authenticator apps: an app generates a new code every thirty seconds.
- Security keys: a small physical device you plug in or tap.
- Biometrics: fingerprint or face recognition.
- Push approvals: you tap “approve” on a notification.
Why It Matters
Passwords are often reused, guessed or stolen in data breaches. Adding a second step blocks the majority of automated attacks. It is one of the simplest and most effective ways to protect email, banking and social accounts.
How to Turn It On
- Open the security settings of your account.
- Look for “two-step verification” or “2FA.”
- Choose a method, preferably an authenticator app.
- Save the backup codes in a safe place.
- Test by signing out and in again.
Tips and Cautions
- Never share a verification code with anyone, even someone claiming to be support.
- Keep backup codes offline in case you lose your phone.
- Enable 2FA first on your email, because it can reset your other passwords.
Related Words
- MFA: multi-factor authentication, which can use more than two steps.
- Password manager: an app that stores strong, unique passwords.
Final Thoughts
Two-factor authentication takes a minute to set up and can save you from a major headache. Turn it on today for your most important accounts.
