⚙️ Set up 2-factor authentication
By: Ido Montekyo
Tags: Security, Information Technology, Information Security, Cybersecurity, Facebook

Photo by Franck on Unsplash

What is 2FA?

Multi-factor authentication (MFA; encompassing Two-factor authentication or 2FA, along with similar terms) is an electronic authentication method in which a computer user is granted access to a website or application only after successfully presenting two or more pieces of evidence (or factors) to an authentication mechanism: knowledge (something only the user knows), possession (something only the user has), and inherence (something only the user is)

Why do I need it?

It protects me from the following:

If I use similar passwords on several websites - if one website is hacked and my credentials are stolen which is usually email + password, due to 2FA, it will be unusable on any other website

Please note: using the same password on different websites is not secure and should be avoided

If I am a victim of a Phishing attempt, it will be much harder for the bad guys to win

Phishing is the fraudulent attempt to obtain sensitive information or data, such as usernames, passwords and credit card details, by disguising oneself as a trustworthy entity in an electronic communication. Phishing is an example of social engineering techniques used to deceive users. Users are lured by communications purporting to be from trusted parties such as social web sites, auction sites, banks, colleagues/executives, online payment processors or IT administrators.

Please note: 2FA is not bulletproof against Phishing. But it can make it much harder for the bad guys

How do I set it up?

First, you need an authenticator app:

“A third-party authenticator (TPA) app enables two-factor authentication, usually by showing a randomly-generated and constantly refreshing code which the user can use.”

Microsoft Authenticator is my favorite app and it is compatible with most websites that support 2FA. It is available as an Android and iPhone app.

Microsoft Authenticator

Once you setup a website to use 2FA, you will be prompted to scan a QR code with the Authenticator app. You simply:

Press the + button (add account) Select Other (Google, Facebook, etc.) The camera will be activated… Point to the QR code and click That’s it! you’re all set! 👍🏻

Example

Now, let’s see how you can set up each website to use 2FA.

Gmail

An email account is the most important account to protect. It can be used to sign in to other websites using auth2 protocol, or simply for “password reset”.

Setting up 2FA is Gmail is very easy. Just go to 2 step verification at https://www.google.com/landing/2step/ and it will guide you all the way through.

2 step verification

Facebook

Go to your profile settings

Click on Settings & Privacy → settings → Security and Login → Two-Factor Authentication

Click the Edit button at Use two-factor authentication

Activate two-factor authentication

Once completed it will appear as On

Facebook

Linkedin

Go to your profile settings

Click on Settings & Privacy → Sign in & Security → Two-step verification

Click Turn On

Once completed it will appear as On

Linkedin

Amazon

Go to Your Account → Login & security → Two-Step Verification (2SV) Settings

Click on the Edit button

Enable Two-Step Verification

Amazon

Paypal

Go to my account settings → security → 2-step verification

Click on the Update button

Turn on 2-step login

Paypal

Twitter

Go to the More (3 dots) button → security and account access → Security → Two-factor authentication

Check the authentication app

Twitter

How do I use it?

Each time you log in to a website, you will be prompted to enter a token which is simply a 6 digit number

Open the authenticator app → Click the correct service (e.g. Facebook) and copy the number into the prompt

That’s it! you’re all set! 👍🏻

Final thoughts

These are a few examples of apps that require 2FA. I was surprised by how easy it is to set this up and use it on a daily basis!

Stay safe!