Two-step sign-in puts a second lock on your accounts: your password, plus a code or a tap on your phone. Even if a crook steals your password, they still can't get in without that second step. Check these off one at a time, at your own speed.
-
Start here: every “Forgot your password?” link goes to your email.
Gmail: Google Account → Security & sign-in → 2-Step Verification → Turn on 2-Step Verification
Not Gmail? Look in your email account's security settings for “two-step” or “two-factor.”
-
Look in your bank's app or website under Security or Settings. Not sure? Call the number on the back of your card and ask.
-
Your picture (top right) → Settings and privacy → Settings → Accounts Center → Password and security → Two-factor authentication
-
They get you back in if you lose your phone. Keep them “somewhere safe, like where you keep your passport” (Google). Not on the fridge. Not in your email.
-
I never read a code to anybody. “Anyone who asks you for your account verification code is a scammer” (Federal Trade Commission). Hang up, and call the number on the back of your card.
A code I didn't ask for? Treat it like a smoke alarm.
It may mean someone has your password. Check, every time:
- Tap “No, it's not me.” Never “Approve.”
- Don't share the code. With anybody.
- Change that password, on a phone or computer you trust.
Easy start: a code by text message is fine to begin with. When you're ready, move up to an app like Google Authenticator or Microsoft Authenticator. Any two-step is better than none.
Your checkmarks stay on this phone or computer, so you can come back and finish later.
Questions? Email Uncle Jim: aloha@kupunatechhui.org