How to Set Up Two-Factor Authentication on Your Main Accounts

Imagine waking up one morning, finding someone has accessed your email account.

You attempt to sign in, but your password no longer works.

Social media accounts are spewing out strange messages, and you come to a shocking realisation - your information is being exploited by someone else.

That sounds pretty scary, doesn't it?

Alas, compromised password accounts are the main way villains leverage online access to your personal lives.

Most individuals believe they just need strong passwords to protect themselves, but there's one vital layer of security they're forgetting.

That's where two-factor authentication comes in handy.

Two-factor authentication, or 2FA, adds layers of security to your online accounts beyond just your password.

The good news is, it's relatively simple to turn on.

We'll discuss how two-factor authentication works and show you how to set it up with the accounts you use on a daily basis.

What is two-factor authentication?

Let's say you live in a house with a front door.

You know that locking it keeps riff-raff out, but what if we went a step further and added security measures to this door?

Two-factor authentication works somewhat similarly to this analogy, albeit with slight differences.

When signing in to your online account, you aren't just asked to enter your password.

You might need to enter a temporary code generated by an authenticator application, approve a sign-in request on an authenticator application, or use a security key to prove who you are.

These are merely a handful of the authentication methods available.

As you can likely tell, two-factor authentication provides some pretty robust security.

Even if one's password gets leaked or guessed, it'll still require a different sign-in verification to actually breach one's account.

Why is two-factor authentication so important?

People use online accounts for practically everything in their lives.

Emails store personal conversations, social media accounts save embarrassing photos, banking apps contain individuals' life savings.

Compromised accounts can wreak absolute havoc with users' lives.

Let's look at compromised email accounts.

Someone breaches an individual's primary email account, and that person panics.

They change their password, but what about other accounts?

If their other accounts utilise this email as a recovery method, those accounts can also become compromised, and passwords may need to be changed.

This is why enabling two-factor authentication is so important.

It may not stop every form of cyber-attack, but it certainly helps.

Now, let's learn how users can set up two-factor authentication for their online accounts.

How to enable two-factor authentication on Google

Google accounts can include Gmail, Google Drive, YouTube, and many more.

It is absolutely essential that one sets up additional verification security measures to protect these accounts, as they tend to be at the core of most individuals' digital lives.

Luckily, Google offers multiple verification methods.

Here's how users can enable two-factor verification with Google:

1. Open up one's Google account settings.
2. Look for either Security or Security & sign in.
3. Two-step verification should appear under the sign-in category. Choose it.
4. Follow the on-screen prompts and complete the desired verification requirements.
5. Once these requirements have been met, confirm that one's account is protected.

Google accounts may suggest different verification methods depending on which phones and devices one uses.

It's important to choose a method that offers the highest level of security available.

Google's prompt might even ask the user to set up a new passkey or utilise a security key for the increased security. Users should enable account recovery options as well for their Google accounts, so they're not locked out due to losing their phone.

That way, Google can ask for some form of extra-sign-in verification when trying to log in from a new device.

How to enable two-factor authentication on an Apple account

Apple accounts are often used to synchronise photos across devices with iCloud, store personal files, and utilise subscriptions. This is especially important to secure if one uses an iPhone, an iPad, or a Mac.

To enable two-factor authentication on an Apple account:

1. Open up Settings on one's iPhone.
2. They need to find their name at the top and select Sign-In & Security.
3. Look for the Two-Factor Authentication option.
4. If two-factor authentication hasn't been turned on, they need to follow the prompts on their screen.
5. Ensure they have a recovery phone set up when they're asked.

Apple accounts already have two-factor authentication, so chances are, this feature might be enabled already.

However, there are additional steps that can be taken.

There may be a prompt where one's phone needs to approve a sign-in request from a trusted device and/or browser.

Make sure they update their recovery phone number and learn about Apple's account recovery options before losing access to their trusted devices.

How to enable two-factor authentication on Microsoft

Microsoft accounts can be used for Outlook, OneDrive, Xbox, etc.

If an account is used to send and receive important emails, it's best to enable additional authentication for its safety.

How to enable two-step verification on a Microsoft account:

1. Make sure to open up Microsoft's account security centre and log in with their current account details.
2. Look for the advanced security options.
3. The user needs to select the option for Two-step verification.
4. Choose Turn on to follow the prompts.
5. Pick which verification methods are preferred.

Microsoft might offer additional authenticator application options or security keys.

Microsoft Authenticator can be used to approve sign-ins that would normally require one to enter a verification code.

Once additional account security has been enabled, make sure to save recovery information or recovery codes provided somewhere safe.

How to enable two-factor authentication on Facebook

Facebook accounts can not only be used to post social content but have messages, photos, and many other items that shouldn't be shared with others.

Unfortunately, compromised accounts can be utilised to impersonate someone and defraud their friends.

Enabling two-factor authentication can help reduce this risk.

How to enable two-factor authentication on Facebook:

1. Open up Facebook and head to Settings & privacy > Settings .
2. Choose Accounts Centre.
3. Under the Security and Login category, choose Password and security.
4. Select Two-factor authentication.
5. Choose their Facebook account.
6. Choose a verification method and follow the prompts.

An authenticator application is best utilised over SMS if both options are available.

Make sure to ensure that there aren't any devices logged into one's Facebook accounts that they aren't aware of.

Once Facebook two-factor authentication has been set up, it's always a good idea to review the devices currently logged into one's account.

How to enable two-factor authentication on Instagram

Instagram accounts are utilised to share private photos, engage in personal conversations, and even host business accounts.

Losing access to one's Instagram account can be especially problematic for those who run businesses.

Luckily, Instagram has additional sign-in verification methods.

How to enable two-factor authentication on Instagram:

1. Open the Instagram application.
2. Go to their profile and choose the settings menu.
3. Open Accounts Centre.
4. Choose Password and security.
5. Navigate to Two-factor authentication.
6. The user needs to choose their Instagram account.
7. Pick an authentication method and follow the prompts.

Depending on the user's account, Instagram might offer an authenticator application or other sign-in verification options.

Once two-factor authentication has been completed, it's always a good idea to save backup codes for Instagram accounts.

This is essential if the individual loses access to their authenticator application.

How to enable two-step verification on WhatsApp

WhatsApp can have intimate conversations, work-related chats, family talks, and even hold secret information.

WhatsApp has an additional account protection measure, but it's done in a slightly different manner than other services.

WhatsApp's two-step verification has a six-digit PIN tied to one's account registration.

Here's how to enable two-step verification on WhatsApp:

1. Open WhatsApp.
2. Go to Settings.
3. Tap on Account.
4. Choose Two-step verification.
5. Enable Turn on or Enable.
6. Create a six-digit PIN.
7. Choose to link a recovery email if available.

Make sure to choose a secure PIN that's hard to guess.

Avoiding numbers like 123456 or one's birthdate could be wise.

Adding a recovery email is important if users forget their PIN.

Never share WhatsApp registration codes or WhatsApp two-step verification PINs with anyone, even if they claim to be from WhatsApp.

Which two-factor authentication method should I choose?

Not all verification methods are equal.

Understanding the differences can help users decide which one to choose.

SMS:

This verification method requires a short-term code sent to one's phone number.

It's convenient, but text messages can be compromised.

It's better than having only a password for one's account, but there are better alternatives than using SMS.

Authenticator applications:

Google Authenticator, Microsoft Authenticator, and other authenticator applications can randomly generate temporary verification codes.

These authenticator applications tend to be much safer and don't require an SMS to be sent.

Authenticator applications are usually a solid verification method for most online accounts that offer them.

Security keys and passkeys:

Physical security keys and passkeys can be much safer than other verification methods.

Unlike prompting individuals to enter a code on a fake website, security keys can utilise cryptography to secure one's account.

Phishing-resistant sign-in methods are the safest choice when available.

The best verification method depends on the service and devices that one owns.

What if I lose my phone?

One of the issues people tend to worry about with two-factor authentication is losing one's phone.

What if one gets one's phone stolen, breaks one's phone, or buys a new phone?

Fortunately, most services tend to offer recovery options.

Some recovery options can include recovery codes, an alternative trusted device, a security key, or account recovery options.

Account recovery options tend to vary from service to service.

Before breaking, losing, or replacing one's phone, make sure to check their authenticator accounts have a way of being transferred or reinstalled.

Authenticator application accounts can be transferred or set up differently depending on the service.

Save recovery codes in a reliable and secure location, preferably not on the phone being used for two-factor authentication.

It can be a simple task that can save you headache later.

Common two-factor authentication mistakes to avoid

Enabling two-factor authentication is a great start, but there's always the possibility of making mistakes.

One mistake people tend to make is sharing verification codes.

Scammers can pose as banks, courier companies, and other services and try to acquire a code from the user.

Never share sign-in verification codes if the request was unsolicited.

Another mistake is accidentally approving sign-in requests from scammers.

Always ensure that any push notification requesting sign-in approval is actually from oneself before approving.

Never save recovery or recovery codes in an unsafe location.

Lastly, remember that two-factor authentication doesn't mean weak passwords are acceptable.

Everyone should use strong and unique passwords for their important accounts.

A password manager can be helpful in generating and storing passwords without having to memorise each password.

Which accounts should I protect first?

If this is the first time that one has considered protecting their online accounts this way, it can be overwhelming to want to set up two-factor authentication on every service.

Start with which accounts can do the most damage if compromised.

One's primary email account tends to be a great place to start since it's usually the account that gets used to reset passwords.

Individuals should then consider which accounts have sensitive or financial information and protect those as well.

These can include banking accounts, payment services, cloud storage accounts, and social media accounts with saved payment cards.

Make sure to protect the password manager account, if one has one, as it should have the security details to every account.

Once the most important accounts have been secured, users can move on to other accounts and slowly increase their online security.

There's no need to rush this process.

What matters is ensuring increased protections for online accounts.

Final thoughts

Online account security isn't as complicated as many make it out to be.

Many users continue to use only a password because they believe additional verification will unnecessarily complicate the sign-in process.

In truth, it only adds one additional step.

This extra step could mean the difference between having an account compromised and not having one compromised.

Google, Apple, Microsoft, Facebook, Instagram, WhatsApp, and many other services offer some form of two-factor authentication.

It's always worth spending a few minutes to review one's account security and choose a strong verification method.

Remember to keep recovery information in a secure location and never disclose authentication verification codes to anyone.

Most importantly, remember that cybersecurity isn't about making individuals completely safe from everything.

It's about increasing the difficulty and reducing the risk of unauthorised account access.