Two-step sign-in (also called two-factor authentication or 2FA) means signing in takes two things: your password, plus a second proof that it's really you. Someone who steals or guesses your password still can't get in.
The kinds of second step
- An authenticator app on your phone that shows a six-digit code that changes every 30 seconds
- A prompt on your phone that you approve
- A passkey, which uses your phone's or computer's fingerprint, face or PIN
- A text message with a code
Text-message codes are better than nothing, but an authenticator app, an approval prompt or a passkey is stronger, because text messages can be redirected by scammers.
Where to turn it on first
- Your e-mail (it's the key to resetting every other password)
- Banking and payment accounts
- Your business software and accounting
- Social media pages for your business
- Your domain and website accounts
Where to find it
Look in the account's settings under Security, or search the settings for "2-step" or "two-factor". Microsoft, Google, Apple, Facebook and most banks all offer it.
Don't skip the backup codes
When you turn it on, you're usually given backup codes. Keep them somewhere safe, such as a password manager or printed and locked away. They get you in if you lose your phone.
Setting it up for a whole team? We can turn it on across your business accounts and make sure nobody gets locked out.
Need a hand?
More about our business e-mail and domains help. Or tell us what's going on and we'll get back to you.
Send us a message or call (208) 745-2981, Monday to Friday, 9 to 5.