Glossary

Two-Factor Authentication (2FA)

A second login step, usually an app code or a hardware key, on top of a password.

Two-factor authentication adds a second requirement to a login: something you know (the password) and something you have (a phone, a hardware key, an authenticator app).

The choice matters. SMS codes can be taken by SIM-swapping, which is how most exchange account takeovers happen. An authenticator app or a hardware security key is meaningfully stronger and costs nothing to set up.

Enable it on the exchange, on the email address attached to the exchange account, and on your password manager. Anyone who gets into your email first can otherwise reset your exchange password.

Related terms

← All glossary terms