What Is Two-Factor Authentication?
And why you probably need it switched on right now.
You have a lock on your front door. But imagine if someone could copy your key. That lock suddenly feels a lot less secure.
That is what happens when you only use a password to protect your accounts. If someone gets hold of it — through a scam, a data breach, or just guessing — they are straight in.
Two-factor authentication is a second lock. And it makes all the difference.
So what actually is it?
Two-factor authentication — sometimes called 2FA — means that when you log into an account, you need two things instead of one.
First, your password. Second, a code that gets sent to your phone or generated by an app.
Even if someone has your password, they cannot get in without that second code. And that code only lasts a few seconds before it changes.
Think of it like a cash machine. Your card is the first factor. Your PIN is the second. One without the other is useless.
How does it work in real life?
You go to log into your email. You type your password as normal. Then a message pops up asking for a code.
Your phone buzzes. A six-digit number appears. You type it in. You are logged in.
The whole thing takes about ten seconds. And your account is now significantly harder to break into.
How do I turn it on?
It is different for each service, but here is how to do it for the most common ones.
For your Apple ID
Settings → your name at the top → Sign-In & Security → Two-Factor Authentication → turn it on
For Gmail
Go to myaccount.google.com → Security → How you sign in to Google → 2-Step Verification → turn it on
For Facebook
Settings → Password and Security → Two-Factor Authentication → turn it on
Tip: Most accounts will send the code by text message to start with. That is fine. It is much better than nothing.
Use it alongside a password manager
Two-factor authentication works best when your passwords are strong in the first place. If you are still using the same password for everything, that is worth sorting too.
A password manager remembers all your passwords for you — so you only need to remember one. Used together, a password manager and two-factor authentication make your accounts about as secure as they can be.
What Is a Password Manager?SimpleTech Blog →Do I really need it?
Yes. Especially for your email.
Your email account is the key to everything else. If someone gets into your email, they can reset the passwords on every other account you have — your bank, your social media, your shopping accounts. All of it.
Switching on two-factor authentication for your email alone is one of the most important things you can do to protect yourself online.
What if I lose my phone?
When you set up two-factor authentication, most services give you backup codes. These are one-time codes you can use if you ever cannot access your phone.
Write them down and keep them somewhere safe — not on your phone.
Tip: A lot of people worry that two-factor authentication will lock them out of their own accounts. In ten years of using it, I have never been locked out. The backup codes mean you always have a way back in.
Text codes are a great start. But there is more.
Most people begin with a code sent by text message. That is fine and much better than nothing.
If you want to go further, there are stronger options worth knowing about.
Authenticator apps — like Google Authenticator or Apple's built-in option — generate codes on your device rather than sending them by text. Harder to intercept and slightly more secure.
Passkeys — a newer technology that replaces passwords entirely. Instead of typing anything, your device recognises you using Face ID or Touch ID. No password, no code — just you. Apple, Google and many websites now support them.
Hardware security keys — a small physical device you plug in or tap against your phone. The strongest option available, used mainly by people who need the highest level of protection.
For most people, starting with text codes or an authenticator app is absolutely the right move. The important thing is getting it switched on.
Not sure which option is right for you? That is exactly the kind of thing I can help with.
Want help setting up two-factor authentication on your accounts?
Get in touch