3 minute read
Two-step login, explained
Two-step login (also called 2FA) means a login needs your password plus a second proof, usually a 6-digit code from an authenticator app or a passkey on your phone. Even if someone steals your password, they cannot get in. Turn it on first for your email, because email can reset every other account.
Which kind to use
- Passkey or security key. Best. Cannot be phished.
- Authenticator app like Ente Auth or 2FAS. Very good.
- Text message codes. Better than nothing, but scammers can steal your number by tricking your phone company, called a SIM swap.
Turn it on in this order
- Your main email
- Your bank and payment apps
- Your Apple, Google or Microsoft account
- Social media
- Shopping sites with saved cards
Save the backup codes
Every site gives you backup codes when you turn on two-step login. Print them or save them in your password manager. They get you back in if you lose your phone.
The one rule
Never read a login code to anyone who calls or texts you. No real company ever asks for it. That code is the key to your account.