Two-step verification
Signing in in two steps: first your password, then a one-time code, for example from an app on your phone. A password alone is then not enough to get into the account.
How does two-step verification work?
After your password, the service asks for a second proof that it is you. Most often it is a 6-digit code from an app such as Google Authenticator, which changes every 30 seconds. The code is created on your phone, so it works even without internet.
What should you choose: an app or text messages?
We recommend an app with codes. Codes sent by text message can be vulnerable to phone number-based attacks, such as a SIM swap. Choose text messages only when the service offers no app, and always save your backup codes.
Category: Security
