By Digital Learning Specialist Amelia
In our digitally driven world, passwords are no longer enough to keep your information safe.
The best way to protect your accounts is to use two-factor authentication, sometimes called two-step or multifactor authentication. This authentication requires you to provide two forms of proof that you are authorized to access an account.
It’s an important first line of defense against hackers, because it means that hackers would need to have more than your password to break in to your account.
How it works
When logging into an account, you will typically undergo a two-step process:
- You enter your standard username and password.
- You provide a second piece of evidence, such as a code sent to your phone or generated by an app.
Authentication types
There are various ways you can digitally authenticate your identity, including:
- Something you know: Password or PIN
- Something you have: A smartphone, a passkey, or a smart device to provide a code via an application, text message, email, or voice call
- Something you are: Fingerprints, facial recognition, or voice match
Common authentication methods
- Text message or email: A temporary numerical code is sent to your mobile device.
- Authenticator apps: Applications like Google Authenticator generate rotating temporary codes offline.
- Device approvals: Prompts ask you to tap “approve” or select a matching number on your screen.
- Biometrics: You scan your fingerprint, use facial recognition, or enter a screen lock PIN on your phone.
- Hardware keys: Physical USB or near-field communication (NFC) devices (like a YubiKey) must be plugged in or tapped.
Why do I need it?
Setting up multifactor authentication means that hackers would need to jump an additional hoop to get your information.
For example, if a thief steals just your password from a leaked website list, they are still stuck. They do not have your physical phone to tap “approve” or to see the changing code. This stops hackers cold because they cannot fake two completely different pieces of proof at the exact same time.
Key takeaway
Your password remains an essential first line of defense, but multifactor authentication provides the crucial extra protection needed today. Whenever an application or service supports two-step verification, enabling this feature is strongly recommended.
Have a tech question?
About Amelia
Part concertgoer, part bibliophile, part audiophile, half theatrical skills, half creative journaling. Amelia is part of the digital learning team as a specialist who seeks to bridge the gap between informal and formal digital literacy by emphasizing “we will learn together.”