Two-factor authentication: turn it on today

What it is

After your password, you prove it's you with something you have:

• A prompt on your phone ("Yes, it's me")
• A code from an authenticator app such as Google Authenticator or Microsoft Authenticator
• A text message code (better than nothing, but the weakest option)
• A passkey or security key (the strongest)

Turn it on for these first

1. Your email (Google, Microsoft, Apple, Yahoo). Email can reset every other account.
2. Banking
3. Your Apple ID or Google account
4. Social media (Facebook, Instagram)
5. Your password manager

Where to find it

• Google: myaccount.google.com → Security → 2-Step Verification
• Microsoft: account.microsoft.com → Security → Advanced security options
• Apple: Settings → your name → Sign-In & Security
• Facebook: Settings → Accounts Center → Password and security

Save your backup codes

Most services give you backup codes when you turn on 2FA. Print them or save them in your password manager, in case you lose your phone.