How to set up two-factor authentication on important accounts?

Install an authenticator app like Google Authenticator, Microsoft Authenticator, or Authy on your phone. When you enable 2FA on an account, the app generates a new 6-digit code every 30 seconds. Enter this code after your password to log in.

A hardware security key like YubiKey ($25-55) or Google Titan ($30) is a small USB or NFC device that you tap or insert when logging in. It provides the strongest form of 2FA and is virtually impossible to phish.

You do not need to enable 2FA on every account at once. Start with the five most critical: your primary email (the gateway to all password resets), bank accounts, social media, cloud storage, and your password manager itself. Add more accounts gradually.

Some password managers like 1Password and Bitwarden can store and auto-fill 2FA codes alongside your passwords. When you log in, the manager fills both your password and the 2FA code in one step. This centralizes your security in one tool.

If an authenticator app feels too complicated, enable SMS-based 2FA as a starting point. The service sends a text message with a code each time you log in from a new device. While not as secure as an authenticator app, SMS 2FA blocks the vast majority of automated attacks.