Turn on an extra login check

A second sign-in step helps protect accounts even if someone knows a password.

What to do

  1. Open Security or Sign-in settings for your important accounts.
  2. Turn on two-factor authentication, two-step verification, or MFA.
  3. Prefer a passkey or authenticator app when practical. Save backup codes securely.

A passkey often lets you sign in using your device's fingerprint, face recognition, or screen lock. SMS codes are still better than no extra check. Never share one-time codes or approve unexpected sign-in requests.

Official resources