Two-Step Verification: What It Is and How to Turn It On
“Two-step verification” sounds technical, but it’s one of the simplest and most effective things you can do to protect your accounts. A password on its own can be guessed, leaked in a data breach, or talked out of you by a scammer. Two-step verification adds a second check, so a stolen password isn’t enough to get in. Here’s what it means and how to turn it on.
What It Is
Think of your password as the key to your front door. Two-step verification is like also needing a code that only you can see. Someone who has a copy of your key still can’t get inside.
When you sign in, you enter your password as usual, then confirm it’s really you with a second step.
What the Second Step Looks Like
A text message with a code that you type in.
A prompt on your phone asking “Is this you trying to sign in?” with a Yes or No button.
An authenticator app that shows a code that changes every few seconds. It’s a little stronger, but a bit more to learn.
Any of these is far better than nothing. If you’re not sure where to start, a text code or a phone prompt is a good choice.
Which Accounts to Protect First
Start with the ones that would cause the most trouble if someone got in:
Your email. Password reset links go to your email, so whoever controls it can often take over your other accounts.
Your bank and credit card accounts.
Your Apple or Google account.
How to Turn It On
Apple ID on an iPhone: open Settings, tap your name at the top, tap Sign-In & Security, then Two-Factor Authentication. Many Apple accounts already have it on, so you may find it’s already protecting you.
Google or Gmail: go to myaccount.google.com, tap Security, and look for 2-Step Verification. This may also already be on.
Other accounts (bank, shopping, social media): sign in on the company’s official website or app and open the Security settings. Look for wording like “Two-Step Verification,” “Two-Factor Authentication,” or “Login Verification.”
Set Up a Backup Way In
If you lose your phone or change your number, you’ll need another way into your account. Add a second phone number or trusted device if the account offers it, or save the backup codes it gives you, and keep them somewhere safe, like a written note in a drawer. When you get a new phone or number, update your accounts before you switch if you can.
The Most Important Rule
These codes are for you only. Never read a code to someone who calls, texts or emails you, even if they say they’re from your bank, Apple or Google. Scammers often try to sign in to your account themselves, which sends a code to your phone, and then call you pretending to be support and ask you to “confirm” it. A real company never needs you to read it to them.
For the same reason, if a code or a “Is this you?” prompt shows up and you didn’t start anything, don’t approve it. Someone may be trying to get into your account, so change your password right away.
It Only Takes a Few Minutes
Turning on two-step verification is a one-time task, and it protects you every day after. If you’d like someone beside you while you do it, a Kendera Global session can walk through your accounts with you, one at a time, step by step.
