Cybersecurity · Accounts
Set up two-factor authentication
Add a second barrier to email, banking and social accounts.
6 min read · General educational guidance
- Start with email, password manager, banking and primary social accounts.
- Prefer passkeys, security keys or an authenticator app over SMS where supported.
- Store backup codes offline and add a second recovery method you control.
Practical example
Secure email first because it resets other accounts. Add a passkey or authenticator, download one-time recovery codes, store them away from the phone, then repeat for banking and your password manager.
Common mistakes to avoid
- Using the same device as the only sign-in factor and only recovery method.
- Approving a prompt just to make repeated notifications stop.
- Taking screenshots of recovery codes that automatically sync to many devices.
Trusted sources and next reading
If money, identity documents or a work system may be affected, preserve evidence and contact the relevant bank, employer or authority quickly.