Two-Factor Authentication
Add a security code to your accounts.
What is 2FA?
- After typing password, also enter a 6-digit code.
- Code comes via text or app — only you have it.
- Prevents hackers from accessing even with password.
- One of the most important security measures.
- Used by banks, email, social media.
- Sometimes called "2-Step Verification."
Where to enable first
- Email accounts (Gmail, Yahoo, Outlook).
- Banking + financial accounts.
- Social Security myAccount.
- Apple ID + Google account.
- Investment accounts.
- Anything with money or sensitive info.
SMS (text) 2FA
- Easiest — code sent by text message.
- Login prompts: "Enter the code we texted you."
- Works without any new app.
- Vulnerable to SIM swap fraud.
- Better than nothing — much better than just password.
- Most banks offer this.
App-based 2FA (more secure)
- Google Authenticator — free, simple.
- Authy — free, syncs across devices.
- Microsoft Authenticator — free.
- App generates new code every 30 seconds.
- No SMS needed.
- More secure than text codes.
Setup process (most accounts)
- Login to account.
- Find Settings → Security or 2-Factor Auth.
- Choose: text message or authenticator app.
- Verify your phone number.
- Enter test code.
- Save backup codes — printed copy in safe.
Backup codes — critical
- Always save backup codes when offered.
- 10 one-time use codes typically.
- Use if phone lost or new phone.
- Print + keep in safe place.
- Without these, lost phone = locked out.
- Email them to yourself + delete after printing.
Email + bank first, today
If you do nothing else, enable 2FA on your primary email and your bank accounts today. Email is the master key — if hackers control your email, they can reset all other passwords. Banking is obvious. Both take 5 minutes to set up. Combined with a strong unique password from Bitwarden, you become 99% safer than the average person online.