Setting Up Two-Factor Authentication

14 items · Technical · Easy difficulty · 30 min

Secure your accounts fast with a simple two-factor authentication setup plan.

• List priority accounts to enable 2FA

  Include email, online banking, social, cloud storage, crypto, and any admin accounts.

• Select a primary 2FA method

  Prefer authenticator apps or hardware security keys over SMS when possible.

• Install an authenticator app on your phone

  Choose Authy, Google Authenticator, or Microsoft Authenticator.

• Enable cloud backup or export for your authenticator app

  Turn on Authy cloud backup or export accounts securely so you can recover codes.

• Enable 2FA on your primary email account

  Protecting email secures most account recovery flows.

• Set up authenticator app for your email account

  Scan the service QR code with your authenticator app for time-based codes.

• Save email backup codes to a secure location

  Store one copy offline and one in a password manager.

• Enable 2FA on online banking accounts

  Use the strongest option your bank supports (authenticator or hardware key).

• Register a hardware security key for banking or critical accounts

  Consider a YubiKey or similar for strongest protection.

• Enable 2FA on social media and other consumer accounts

  Facebook, Instagram, Twitter, and LinkedIn often support authenticator apps.

• Review connected apps and remove unused access

  Revoke old app tokens and third-party access that could bypass 2FA.

• Store backup codes from all accounts in a secure place

  Use a reputable password manager or an encrypted offline file/USB.

• Set up account recovery methods

  Add a recovery phone, secondary email, or trusted contacts where supported.

• Test your 2FA and recovery methods by signing out and signing back in

  Verify authenticator codes, hardware keys, and backup codes work before relying on them.

Printed from TickYouOff — the interactive version tracks your progress and can be shared with others.