Two-factor authentication (2FA) means that after your password, an account asks for a second thing to prove it is really you, like a code from an app. It is one of the strongest protections you have, but only on the accounts where it is switched on. This is a quick audit to find the gaps.
Go in this order
You do not need to check everything at once. Start with the accounts that would cause the most damage if someone got in, then work down.
- Email first. Your email can reset the password on almost everything else, so it is the master key. Protect it before anything else.
- Then your bank and any payment app.
- Then your main social account and any account tied to your public identity.
- Then shopping accounts that store your card or address.
Where to find the setting
On most services, open Settings, then look for Security, Password and security, or Sign-in. The feature may be called two-factor authentication, two-step verification, or login verification. If you cannot find it, search the service’s help pages for « two-factor » and it will usually link you straight there.
Pick the stronger option
When you turn it on, you are often offered a choice. If you can, choose an authenticator app (an app that generates a fresh code every 30 seconds) or a passkey (a sign-in tied to your device, with no code to type). Both are harder to intercept than a text-message code. Text-message codes are still far better than no second factor, so if that is all an account offers, use it.
- Email has 2FA on
- Bank and payment apps have 2FA on
- Main social account has 2FA on
- Shopping accounts with saved cards have 2FA on
- You chose an authenticator app or passkey where offered
- Backup codes are saved somewhere safe
Anything still unchecked is your to-do list. You can work through it a few minutes at a time.