Two-factor authentication
Two-factor authentication asks for an app code, passkey or security key in addition to the password; it is the most effective defence against account takeover.
Types, strongest first
- Hardware security keys and passkeys
- Authenticator apps (TOTP)
- SMS codes
Watch out
Store backup codes safely; they are your way back if you lose your phone. Guide: protecting social media accounts.
Frequently asked questions
Is SMS-based 2FA enough?
Better than nothing, but vulnerable to SIM swaps; prefer an app or passkey.