Skip to main content

    Two-Factor Apps (2FA)

    The single best account security upgrade.

    What 2FA does

    After you type your password, the site asks for a 6-digit code from an app on your phone. Code changes every 30 seconds. Hacker who steals your password ALSO needs your physical phone. Blocks 99% of account hacks.

    Google Authenticator

    FREE

    Most popular. iOS + Android. Now syncs across devices (since 2023).

    Easiest start.

    Microsoft Authenticator

    FREE

    Best if you have a Microsoft/Outlook account. Cloud backup built in.

    Best for Microsoft users.

    Authy

    FREE

    Multi-device sync built in. Recover codes if you lose phone.

    Best for losing-your-phone protection.

    1Password

    $3/mo

    If you already use 1Password — it stores 2FA codes too. One app for everything.

    Best if combined with manager.

    Apple Passwords (iOS 18+)

    FREE

    Built into iPhone. Generates 2FA codes. Auto-fills.

    Best for iPhone-only homes.

    Why NOT use text-message 2FA

    SMS codes (texted to your phone) are better than nothing — but scammers can hijack your phone number ("SIM swap") and intercept the texts. Authenticator apps are MUCH safer. Use SMS only when an app isn't offered.

    Setup — first time

    1. Install one app from the App Store / Play Store.
    2. Log into a website (Gmail, bank, Facebook).
    3. Go to Account → Security → "Two-Factor Authentication".
    4. Pick "Authenticator App".
    5. Site shows a QR code. Open the app. Tap "+". Scan the QR code.
    6. Type the 6-digit code from app into the website.
    7. Save backup codes (print or screenshot).

    Accounts to enable 2FA on FIRST

    1. Email (Gmail, Outlook, Yahoo, iCloud) — most important. If hacker gets email, they can reset everything else.
    2. Bank and brokerage accounts.
    3. Apple ID / Google Account / Microsoft Account.
    4. Facebook, Instagram, anything social.
    5. Amazon, PayPal, Venmo.

    Save the backup codes

    When you set up 2FA, the site gives you 10 backup codes. Print them. Put with your will or in a safe. If you lose your phone, these get you back into accounts. Without them — recovery is painful.