2FA

Second login security layer: password + code.

Two-Factor Authentication requires two proofs of identity: password + one-time code. Best: an authenticator app (Google Authenticator, Authy) or a hardware key (YubiKey). AVOID SMS-based 2FA, phones can be cloned (SIM swap). In 2018-23 tens of millions were drained from exchanges this way. Enable 2FA everywhere: exchange, email, social media, password manager.

In plain words

Second login step: besides your password you enter a one-time code from an app (Google Authenticator, Authy) or a hardware key (YubiKey). DO NOT use SMS 2FA. Phones can be cloned and the attacker takes over your account. Enable 2FA everywhere: exchange, email, social media, password manager.

Example

Michael Terpin (US): SIM swap + broken SMS 2FA = $24M crypto loss in 2018.

Also known as: mfa, 2-step verification

Back to the glossary