How-To
Duration: 5m
6 steps
Enable 2FA on your most important accounts (5 minutes)
In 5 minutes, enable two-factor authentication for email, banking and password manager – with an authenticator app instead of SMS.
Two-factor authentication (2FA) is the single most effective step for account security. This guide shows the workflow with Google as an example – very similar for Microsoft, your bank, Apple ID and any modern service.
Steps
- 1 Install an authenticator app Download Google Authenticator, Microsoft Authenticator, Aegis (Android) or Raivo (iOS) from the app store. All apps are free and follow the same standard (TOTP).
- 2 Open account settings Sign in to your account (e.g. Google) and open "Security" → "2-Step Verification".
- 3 Choose the authenticator app as the method Pick "Authenticator app" (not SMS – SMS is vulnerable to <a href="/en/glossary/sim-swap">SIM swap</a>). A QR code appears.
- 4 Scan the QR code In the authenticator app, tap "+" → "Scan QR code". The account is added and shows a 6-digit code that rotates every 30 seconds.
- 5 Enter the code to confirm Type the current 6-digit code into the browser. 2FA is now active.
- 6 Save backup codes Store the 10 backup codes in your password manager or print them and keep them in a safe. They are your fallback if you lose your phone.