Two-factor authentication (2FA) adds a second step to logging in. After the password, you also prove you have something else, usually a code from an authenticator app, a text message or a security key.
Common second factors
- Authenticator apps that show a code that changes every 30 seconds.
- SMS codes sent to a phone number.
- Security keys that you plug in or tap.
2FA for team accounts
Turn on 2FA for every account a team manages and make sure codes go to a device the team controls, not to one person’s private phone. Store backup codes somewhere safe, so losing one device does not lock you out.