How to Turn On Two Factor Authentication Everywhere That Matters

#2fa #security #tutorials #tutorial

Originally published on Tutomod.

Passwords leak. Two factor authentication (2FA) is the seatbelt that still saves you when they do.

Updated August 08, 2026, after a fresh review, with updated visuals and links.

Setting it up takes about three minutes per account, and you only need to do the important ones to be dramatically safer.

Short version: Install an authenticator app first first, then start with your email account. Details below.

Here's how it works

Install an authenticator app first. Any of the three above work. They generate six digit codes that refresh every 30 seconds, and they work without internet or cell signal.
Start with your email account. Your email resets every other password you own, so it's account number one to protect. In Gmail: myaccount.google.com, Security, 2 Step Verification, and add Authenticator app. Scan the QR code, type the current code, done.
- The QR scan links the account to your app
- Save the backup codes it offers, screenshot or paper
Then banking and money apps. Banks, PayPal, anything touching your money. Each has the option under Security settings. Some banks only offer SMS codes; take SMS over nothing.
Then social media. Instagram, Facebook, X, TikTok: all support authenticator apps under Settings, Security, Two factor authentication. Account theft requires clout or passwords, and 2FA kills the second path.
Understand your backup codes. Every service offers one time backup codes when you enable 2FA. They are your spare key if the phone dies. Store them somewhere offline: a notes app with its own lock, or actual paper in a drawer.

Photo by Pixabay on Pexels

Authenticator app beats SMS. Phone numbers can be hijacked (SIM swapping); codes generated on your device cannot travel.
Authy and Google Authenticator can sync codes to a new phone when you upgrade. Set that up before you actually need it.
Confirm 2FA is on by logging out and back in once. Ten seconds of proof beats assumptions.

Is 2FA really necessary on everything?
On email, money and socials, yes. For a forum account from 2011, your judgment.

What if the site only offers SMS?
Enable it anyway. SMS is weaker than an app, but miles ahead of a password alone.

Photo by Kindel Media on Pexels

Email, money, socials: three accounts, fifteen minutes, and the most common account takeover tricks stop working against you tonight.