2FA Shield Raised

How to complete 2FA Shield Raised

This means putting a second lock on the accounts that would do the most damage if stolen: email, banking, password manager, and primary social logins. A leaked password alone won't get an attacker in once you've done this.

1. List your highest-stakes accounts first: primary email, password manager, bank, and any account others use to reset your passwords
2. In each account's security settings, turn on two-factor and choose an authenticator app (Authy, Google Authenticator, or your password manager) over SMS
3. Scan the QR code, enter the test code to confirm it works, then save the backup or recovery codes somewhere offline
4. Repeat for the rest of your sensitive accounts, prioritizing anything tied to money or identity

Tips

• Prefer an app or hardware key over SMS, since SIM-swapping defeats text codes
• Store recovery codes outside the same account, e.g. printed or in your password manager, or you'll lock yourself out on a lost phone
• A hardware key like YubiKey is the strongest option for your email and password manager

What counts as done

You log out and back into a protected account and it demands a code from your app or key, not just the password.