Two-factor authentication, step by step

The strongest simple protection for your accounts: even if someone knows your password, they can’t get in.

Digital safety 1 min read

Two-factor authentication (2FA) asks for a second code when you log in from a new device. That way a password alone is not enough to get into your account.

Which method is best?

  • An authenticator app (Google Authenticator, Microsoft Authenticator, Aegis…): the best option.
  • SMS: better than nothing, but weaker — especially if someone can access your SIM.

Where do I find it?

  • Facebook and Instagram: Settings → Accounts Center → Password and security → Two-factor authentication.
  • WhatsApp: Settings → Account → Two-step verification, and choose a PIN no one knows.
  • Gmail / Google: Google Account → Security → 2-Step Verification.
  • TikTok: Settings → Security → 2-step verification.

Menu names can change slightly between app versions.

Don’t forget

  • When you turn it on, the platform gives you recovery codes. Keep them somewhere safe — you’ll need them if you lose your phone.
  • Never give the code to anyone, even someone claiming to be “support”.
Help us improve: two quick, anonymous questions
After using the platform, do you feel more able to recognise digital violence and know how to protect yourself?
Do you now know where to find help if you need it?

More resources

Digital safety

How do I secure my accounts?

Strong passwords, two-factor authentication and checking connected devices: simple steps that protect you a lot.

1 min read