Two-Factor Authentication (2FA)

Two-factor authentication requires two independent proofs at login: something you know (your password) and something you have or are (a one-time code from an app, a hardware key, or a fingerprint). This keeps an account protected even if the password falls into the wrong hands through a breach or phishing ✕ Phishing is fraudulent messages that impersonate a trusted sender (like a bank or courier) to trick you into handing over passwords or login details. More in the glossary → . App-based codes or hardware keys are the most secure; SMS codes are better than nothing but more vulnerable. For important accounts, 2FA is a must. Find suitable tools in the best password managers comparison.