Use an authenticator app for time-based codes

Install an authenticator app like Google Authenticator, Microsoft Authenticator, or Authy on your phone. When you enable 2FA on an account, the app generates a new 6-digit code every 30 seconds. Enter this code after your password to log in.

Why It Works

Authenticator codes are generated locally on your device and change every 30 seconds. They cannot be intercepted like SMS codes and do not require cell service. Even if your password is stolen, the attacker cannot generate the matching code.

Tips

• Authy backs up your 2FA codes to the cloud, so you do not lose access if you lose your phone
• Google Authenticator now supports cloud backup as well
• Enable 2FA on email first (it is the key to resetting all other accounts), then banking, social media, and shopping
• Save the backup codes provided during setup in your password manager