Two-factor authentication, done right

The one setting that stops most takeovers.

Pick the method

Method	Verdict
Authenticator app (Google Authenticator, Microsoft Authenticator, 2FAS)	Best everyday choice
Security key	Strongest, supported on Facebook
SMS / WhatsApp code	Better than nothing; vulnerable to SIM swap

Set it up

1. Accounts Center, Password and security, Two-factor authentication.
2. Choose the account, then Authentication app.
3. Scan the code with your app and enter the six digits.
4. Save the backup codes offline (see emergency kit).

Lost the phone with your authenticator? UnbanPro covers 2FA with a lost phone.

Common mistakes

• Only using SMS codes. A SIM swap gets around them. See SIM swap.
• Not saving backup codes
• Setting up the authenticator on a phone you're about to replace

Questions people ask

Which authenticator app is best?

Any reputable one works: Google Authenticator, Microsoft Authenticator or 2FAS. Pick one that can back up to your account.