Two-factor authentication (also called two-step verification or 2FA) asks for a second proof that it's really you, usually a code from your phone, when you sign in. Even if someone steals your password, they can't get in without it.
Start with your email account. Your email is the master key: if someone gets into it, they can reset the password on nearly every other account you own. The setting is usually under Security, and it takes about two minutes.
Where to find it:
- Google / Gmail: Manage your Google Account, then Security, then 2-Step Verification.
- Microsoft (Outlook, Hotmail): Account, then Security, then Advanced security options, then Two-step verification.
- Apple ID: Settings, tap your name, then Sign-In & Security.
- Yahoo: Account info, then Account security.
Menus change from time to time, so if you don't see these exact names, look for “Security.”
Which type to choose: an authenticator app or a passkey is stronger than text-message codes, but text-message codes are still much better than nothing. Use whichever you'll actually keep using.
Three things worth doing:
- Save your backup codes somewhere safe, such as printed and kept with your important papers. If you lose your phone, they're how you get back in.
- Never read a code to someone who contacts you. A text or call asking for the code you just received is a scam.
- After your email, turn it on for your banking accounts, then shopping and social media.
Would you rather have someone walk you through it? A remote session is often enough time to set it up on your email and other important accounts. Get remote help with two-factor setup — $35 for the first 30 minutes →