Understanding Two-Factor Authentication

Two-factor authentication, also called 2FA, asks for more than just a password when you sign in. It combines something you know, such as your password, with something you have, such as a phone or security key.

This makes account theft harder because a stolen password alone is not enough to complete the sign-in process.

Authenticator apps are usually safer than SMS codes because phone numbers can sometimes be transferred or attacked through SIM swapping.

Security keys offer strong protection for important accounts. Email codes can help, but they are only as secure as the email account receiving them.

Many services give recovery or backup codes when you enable 2FA. Save them in a secure place, such as a password manager or an offline location you control.

Do not send backup codes through chat, email, or social media. Anyone with those codes may be able to access your account.