Two-step verification
How a second check on your phone keeps thieves out, how to turn it on for your main accounts, and why codes are always secret.
Two-step verification: a second lock that keeps thieves out, even if they know your password. Two step verification, sometimes called two factor authentication, adds a second lock to your account. To sign in, you need your password, something you know, and your phone, something you have. So even if a thief learns your password, they still can't get in.
How it works
You type your password, as usual. A code is sent to your phone, or a message asks if it's really you. You type the code, or tap yes. And you're in. Someone without your phone stays locked out. For a Google account, go to my account dot google dot com, open Security, and tap 2 Step Verification. Then follow the steps to turn it on. Now, when you sign in on a new device, Google sends a code to your phone, or asks you to tap yes on a prompt. Type the code, and you're in.
Turn it on for
Your email, because it can reset all your other passwords. WhatsApp, in Settings, then Account, then Two step verification. Facebook and Instagram, in Accounts Centre, under Password and security. And your banking apps. Use every security option they offer. The codes you get by text message are secret. They're often called O T Ps, which means one time passwords. No real bank, company or friend will ever ask you for one. If anyone asks, it's a scam.
Quick check
Quick check. A caller says they're from your bank and asks for the code just sent to your phone. What do you do? Hang up. Your bank will never ask for your codes. If you're worried, call the bank yourself, on the number on your card. Options: Read them the code; Hang up. Banks never ask for codes.; Send it by text message; Give them half of it.
Recap
Two step verification means two locks, your password and your phone. Turn it on for your email first. Then for WhatsApp, social media and banking. And never share your codes with anyone.
Key points
- Two-step verification asks for your password and a second check, usually a code on your phone.
- Even if someone learns your password, they can't get in without your phone.
- Turn it on for email first (myaccount.google.com, then Security), then WhatsApp, Facebook, Instagram and banking apps.
- Codes and OTPs are secret. No real bank, company or friend will ever ask for them.
Try it: Lock down your accounts
Turn on the second lock for your main accounts.