Accounts · 5 min read
Two-step verification, explained simply
What it is, why it stops nearly every account takeover, and how to turn it on.
Two-step verification means a password alone is not enough to get into your account. A second thing is needed — usually a code.
Which second step is best?
- Authenticator app (Google Authenticator, Microsoft Authenticator) — best. Codes never travel over the phone network.
- Passkey or Face ID — just as strong, easier to use.
- Text message code — better than nothing, but a SIM swap can defeat it.
Start with your email
Your email can reset the password on every other account you own. Protect it first.
- Gmail: myaccount.google.com → Security → 2-Step Verification.
- Outlook: account.microsoft.com → Security → Advanced security options.
- Apple: Settings → your name → Sign-In & Security.
Then your social apps
- WhatsApp: Settings → Account → Two-step verification. Set a 6-digit PIN. This stops the "my friend needs a code" scam completely.
- Facebook / Instagram: Settings → Accounts Centre → Password and security → Two-factor authentication.
Save your backup codes
Every service gives you a set of one-time backup codes. Write them on paper and keep them somewhere safe — not in your phone's notes. Without them, losing your phone can lock you out for good.