Two-Factor Authentication (2FA) Guide

Two-factor authentication (2FA) adds a second layer of security to your accounts. Even if an attacker has your password, they cannot access your account without also having your second factor.

How 2FA Works

After entering your password, you are asked for a second code. This code is either:

• Generated by an authenticator app on your phone (most secure)
• Sent via SMS to your phone number (decent security)
• A physical security key (most secure of all)

Authenticator Apps (Recommended)

Download Google Authenticator or Authy. Enable 2FA on every account that offers it, starting with: email, bank, crypto exchanges, social media.

SMS 2FA Warning

SMS 2FA is better than nothing, but can be bypassed by SIM-swapping attacks where an attacker convinces your mobile carrier to transfer your number to their device. Use an authenticator app where possible.

How to Enable 2FA

On most services: Account Settings → Security → Two-Factor Authentication → Choose authenticator app → Scan QR code with your app → Save backup codes in a safe place.