Just about any account you own on the internet is prone to being hacked — and one of the easiest ways to add an extra layer of security is to enable two-factor authentication. Also known as two-step verification or 2FA, the process gives web services a secondary access to the account owner (you!) in order to verify a login attempt. Typically, this involves phone number and / or an email address.
While 2FA doesn’t totally cloak you from potential hackers, it is an important step in preventing your account from being accessed by unauthorized users. Here’s how to enable 2FA on your accounts across the web.
APPLE
2FA is currently offered to Apple users on iOS 9 or Mac OS X El Capitan or later. We don’t make the rules!
iOS
The steps are slightly different depending on how updated your iOS software is. For those using iOS 10.3 or later, you can enable 2FA on your Apple ID by going to “Settings” > [Your Name] > “Password & Security.” You can turn on 2FA to receive a text message with a code each time you log in.
Those using iOS 10.2 or earlier, the settings are under “iCloud” > “Apple ID” > “Password & Security.”
Mac OS
Click the Apple icon on the upper left corner of your screen then click “System Preferences” > “iCloud” > “Account Details.” (You can shorten this step a bit by typing in iCloud on Spotlight.) Click on “Security” and you’ll see the option to turn 2FA on.
The remainder of the steps, from either iOS or Mac, are the same. You can opt for Apple to send you a six-digit verification code by text message, or a phone call.
Even though you can access Instagram from a web browser, at this time you can only turn on 2FA from its mobile app. Head over your profile and click the hamburger menu on the upper right corner. Under the Account section, you should see “Two-Factor Authentication.” Toggle “Require Security Code” on to receive a text message with a login code to your account’s phone number each time you sign in.
FACEBOOK
Under the hamburger menu on mobile apps or the upper right side on a web browser, click “Settings” > “Security and Login,” or go to https://www.facebook.com/settings?tab=security. Under the section “Use two-factor authentication” you will have the option of registering your phone number to receive a code each time you log in, or have Facebook send a push notification to your phone to authorize or deny the login attempt.
Here, you can also set up a Security Key to log in through USB or NFC, or pre-generate a Recovery Code in case you’re traveling abroad where you will not have cell service.
If you prefer to not use 2FA each time you log in from the same device (say, your personal laptop or phone) you can also set up your trusted devices under the “Authorized Logins” menu. This will allow you to grant access to bypass 2FA for devices currently logged in to your Facebook account.
Under the hamburger menu on mobile apps or the upper right side on a web browser, click “Settings” > “Security and Login,” or go to https://www.facebook.com/settings?tab=security. Under the section “Use two-factor authentication” you will have the option of registering your phone number to receive a code each time you log in, or have Facebook send a push notification to your phone to authorize or deny the login attempt.
Here, you can also set up a Security Key to log in through USB or NFC, or pre-generate a Recovery Code in case you’re traveling abroad where you will not have cell service.
If you prefer to not use 2FA each time you log in from the same device (say, your personal laptop or phone) you can also set up your trusted devices under the “Authorized Logins” menu. This will allow you to grant access to bypass 2FA for devices currently logged in to your Facebook account.
On either the Twitter mobile app or browser version, click your profile avatar and find the “Settings and privacy” menu. Under “Account” > “Security” (or https://twitter.com/settings/account, as a shortcut), you can toggle on “Login verification” to make Twitter text your phone number a code to log in.
Just like other services mentioned above, you can generate a backup code to use when you’re traveling and will be without internet or cell service, or even create a temporary app password that you can use to log in from other devices. The temporary password expires one hour after being generated.
AMAZON
Go to the Amazon homepage and log in. From your Account homepage, find “Login & Security” and click the edit button on “Advanced Security Settings.” To set up, click “Get Started” and Amazon will walk you through registering your phone number, or you can opt to use your preferred authenticator app by syncing it through a QR code.
Once verified, you can select trusted devices to bypass 2FA or generate a code to login via a mobile app.
The easiest way to turn 2FA on across your Google account (i.e., Gmail, YouTube, or Google Maps) is by heading over to the main 2FA landing page and clicking “Get Started.” You’ll be asked to log in then enter a phone number before selecting to receive verification codes by text message or phone call. Like Facebook, you can also choose to use “prompts” that allow you to simply click “Yes” or “No” when a login attempt occurs, or generate a Security Key with a USB stick.
Here, you can also generate backup codes for offline access. Google generates 10 at a time, and they’re designed to be single-use each so once you’ve successfully used one, cross it out as it will no longer work.
SNAPCHAT
From the app’s main page, tap the gear icon and look for “My Account,” followed by “Login Verification.” Select SMS to receive a code for each time you log in. Once 2FA has been enabled on your Snapchat account, you can add trusted devices or request a recovery code for when you’re planning to be somewhere without cellular service.
MICROSOFT
Log in to your Microsoft account and find the “Security settings” menu. Choose to set up 2FA and you’ll get walked through the steps with your phone number similarly to the process outlined for all other services above. For when you lack cell service, click “App passwords” to generate a unique, one-time use password to log in.
DROPBOX
From your Dropbox homepage on the web, click your profile avatar and find “Settings” > “Security.” Scroll down a bit to find “Two-Step Verification” — there it will tell you the status of your 2FA. Click to enable to turn the feature on and enter your phone number to verify.
PAYPAL
On the main dashboard, click the gear icon and find “Profile and settings.” PayPal doesn’t explicitly call the feature out as “Two-Factor Authentication” so you’ll need to look for “Security Key.” Click this to set up what’s basically your 2FA by entering your phone number, verifying with the SMS code, and continuing as normal.
If you lose your phone, change numbers, or decide to revoke authorization rights, come back to this menu in the same steps outlined before to make adjustments.
AUTHENTICATOR APPS
For everything else not listed here, we recommend using authenticator apps to keep track of verification codes so you can get them sent to you without requiring cellular service — useful for when you’re traveling abroad and have access to only internet. Popular options include Authy, Google Authenticator, or HDE OTP (iOS only). These apps follow mostly the same procedure when adding a new account: scan a QR code associated with your account and it will save it in the app. The next time you need to login, just open up your app to find the six-digit code required to get past security.
These extra steps are great for adding a layer of security on all your accounts, but remember that you should be changing and updating your passwords regularly even with 2FA enabled just to stay in tip-top shape.
No comments:
Post a Comment