Two-factor authentication (2FA) means that even if someone has your password, they still cannot get into your account without a second form of verification. It is one of the most effective security measures you can take, and it takes about five minutes to set up on most accounts.
What You Will Need
An authenticator app on your phone. Google Authenticator, Authy, or the Bitwarden authenticator all work. Authy is the most beginner-friendly because it backs up your codes to the cloud (useful if you lose your phone).
Setting Up 2FA on Google
- Go to myaccount.google.com
- Click Security in the left sidebar
- Under "How you sign in to Google," click 2-Step Verification
- Follow the setup wizard
Google will offer to use your phone as a prompt (easiest), a hardware key (most secure), or an authenticator app (best balance). Choose the authenticator app option for the most portable setup.
Setting Up 2FA on Instagram, Facebook, WhatsApp
Instagram: Settings > Security > Two-Factor Authentication Facebook: Settings > Security and Login > Two-Factor Authentication WhatsApp: Settings > Account > Two-Step Verification
All three walk you through the process. You will get a QR code to scan with your authenticator app.
Setting Up 2FA on Email (Gmail, Outlook)
Gmail uses the Google 2FA setup above.
Outlook: Go to account.microsoft.com > Security > Advanced Security Options > Two-Step Verification.
Setting Up 2FA on Banking Apps
Most banks support SMS-based verification at minimum. Check your bank's security settings. If your bank offers an authenticator app option instead of SMS, use that. SMS codes can be intercepted through SIM swapping. Authenticator app codes cannot.
Backup Codes
Every service that offers 2FA also provides backup codes. These are one-time codes you can use if you lose access to your phone. Save them in a secure location, not on the same device you use for authentication.
Set up 2FA on your email account first. Your email is used to recover every other account, which makes it the highest-value target.
