Why it matters most.
WHAT IT IS
A second step beyond your password.
Usually a code from an app, sometimes a physical key.
WHAT IT PREVENTS
Every attack relying on knowing your password.
That is most of them.
WHY IT IS THE SINGLE BEST PROTECTION
A stolen or guessed password becomes useless alone.
WHERE TO ENABLE IT
Email Password manager Domain registrar Hosting Site administration Payment services Bank Social profiles
WHAT KIND TO USE
An authenticator app is better than codes by message.
Messages can be intercepted or redirected to a replacement card.
WHAT IS STRONGEST
A physical security key.
Worth considering for the most critical accounts.
WHAT IT DOES NOT PROTECT AGAINST
A compromised device A session already logged in Someone tricking you into approving a login
WHAT TO DO NOW
Enable it on your email first, then the rest.
