Before you start
Two-step verification (also called 2FA) asks for something extra after your password, usually a code from an app or a tap on a security key. Someone who steals your password still can't get in.
Best: a passkey or a security key. Good: an authenticator app. OK: a code by text message. It's better than nothing, but criminals can sometimes move your number to their own SIM card.
Get a well-known one from your phone's official app store. Many password managers can keep the codes too.
Turn it on, most important first
Whoever controls your email can reset almost every other password. Look in the account's security settings for "2-step verification" or "two-factor authentication".
Don't get locked out
Most sites give you a set of one-time codes. Print them or keep them in your password manager, not only on your phone.
For example a second security key or a backup phone number.
Many authenticator apps can transfer codes. Check before you reset, sell or trade in your old phone.
Your ticks are kept on this device. Sign in and they are kept on your account too, on every device. Sign in
Last checked 2 November 2026 · Something wrong?