Blocks 100% bots, 99% phishing, 66% targeted attacks. Prioritize email, banking, social.
10 steps across 1 sections
1. Steps Guide
- Choose method — Authenticator app or hardware key. Avoid SMS
- Email accounts first — Master key for resets
- Financial accounts — Banking, investments, PayPal
- Social media — Facebook, Instagram, X, LinkedIn
- Cloud storage — Drive, Dropbox, iCloud
- Shopping — Amazon, Apple ID
- Work accounts — Email, VPN, tools
- Save recovery codes — Offline securely
- Backup methods — Secondary device
- Hardware key — FIDO2 for critical accounts
Common Mistakes
- SMS for 2FA (SIM swapping)
- Not saving recovery codes
- Only 1-2 accounts
- No backup method
- Ignoring new accounts
Pro Tips
- Authy multi-device sync
- Hardware keys gold standard
- Recovery codes in manager AND physical
- Passkeys combine password and 2FA
- 2FA on password manager first