L137 · Staying safe · 2 min

Two-factor authentication

Two-factor authentication asks for a second proof after your password, which stops most account takeovers, as long as you never share that second code.

01 · The idea

With two-factor turned on, logging in needs your password plus something else: a code from an app, a text message, a tap on your phone, or a security key.

Authenticator apps and security keys are safer than text codes, because criminals can sometimes take over a phone number. Still, any second factor is far better than none.

The weak point is people. Scammers call pretending to be support and ask you to read out the code you just received. That code is the key to your account.

Turn it on for email, social media and anything with money. Save the backup codes somewhere safe and offline in case you lose your phone.

02 · Think of it like this

It is like a house with a key and a guard dog. A thief might copy your key, but the dog still knows who you are.

03 · Do it now

04 · Quick check

Someone from "account support" asks you to read out the six-digit code just sent to your phone. What should you do?