Lesson 137 · 2 min

Two-factor authentication

Two-factor authentication asks for a second proof after your password, which stops most account takeovers, as long as you never share that second code.

With two-factor turned on, logging in needs your password plus something else: a code from an app, a text message, a tap on your phone, or a security key.

Authenticator apps and security keys are safer than text codes, because criminals can sometimes take over a phone number. Still, any second factor is far better than none.

The weak point is people. Scammers call pretending to be support and ask you to read out the code you just received. That code is the key to your account.

Turn it on for email, social media and anything with money. Save the backup codes somewhere safe and offline in case you lose your phone.

Do it now

Turn it on for one account

  1. 1. Open the security settings of your main social media account.
  2. 2. Turn on two-step verification, choosing an authenticator app if offered.
  3. 3. Write the backup codes on paper and keep them at home.

Quick check

Someone from "account support" asks you to read out the six-digit code just sent to your phone. What should you do?

Someone from "account support" asks you to read out the six-digit code just sent to your phone. What should you do?

More on this

Words from this lesson

Data privacy
Keeping personal or confidential information under control, including deciding what you type into AI tools and where it is stored.
Phishing
Fake messages that pretend to be someone you trust to trick you into clicking a link, paying or sharing passwords.