Two-factor authentication: the extra lock that changes everything

Two-factor authentication is a second check after your password. Usually a code sent to your phone or generated in an app. The result: a hacker who knows your password still can't get in without your phone.

Which method to pick

A code by SMS is better than nothing, but an authenticator app is more reliable. It generates codes that change constantly, without depending on the mobile network. Some platforms also offer a physical key, which is even stronger.

Turn it on first for your most sensitive accounts: your main email, your social media, your gaming account if you've invested in it. Your inbox is often the key to everything else, so start there.

Keep your backup codes

When you turn on two-factor authentication, most services give you backup codes. Write them down somewhere safe and offline. They'll save you the day you lose or change your phone.