Two-step verification explained: 6 things you need to know

Two-step verification is most important for the security of your online accounts. This article explains six things about two-step verification.

Two-step verification explained

Good passwords are important for your online accounts, but more important is two-step verification. In this article, we’ll explain everything you need to know. Two-step verification (also called 2FA, for two-factor authentication) sounds complicated, but that is not so bad.

1. What is Two-Step Verification?

Two-step verification is a second layer of security over online accounts. Consider, for example, your Apple ID, Facebook account or Google account. That means that after entering a username and password, you have to confirm in a second way that you are who you claim to be.

There are several methods for this. The best known is the option to receive an SMS with a code. You will receive this code after entering your password, after which you can enter your account. Other ways are entering a code from an app, or confirming your identity via a prompt.

Two-step verification explained: 6 things you need to know

2. Why is two-step verification important?

A good password for your online accounts is important, but no matter how good your password is: it can leak and then malicious parties have access to, for example, your e-mail, social media or Apple ID. That can have all kinds of scary consequences. From access to your personal data, buying things with your money to complete identity fraud.

However, if you have enabled two-step verification, then you don’t have to worry. Even with your password, malicious parties cannot enter your account.

3. What is the difference between different forms of 2FA?

There are different forms of two-step verification that differ in security and simplicity. The best-known option is to receive a code via SMS. That is also the least safe method. In theory, text messages are relatively easy to intercept. However, for most people, two-step verification via SMS is sufficient and much better than no two-step verification at all.

Two-step verification via an app is safer, because this only works via your smartphone on which the app is installed. This app constantly creates new codes, which you enter instead of an SMS code. Some apps also offer the option to confirm your identity via a prompt. You only have to press a button. This is possible with your Google account, for example.

Make sure that only you can access your device. This can be done via the correct iPhone lock, among other things.

4. Which 2FA apps should I have?

There are several apps in the App Store for two-step verification. Not every online service supports such apps, but the most important accounts nowadays do. These are our favorites:

Google Authenticator – One of the most popular 2FA apps, and for good reason. The app is easy to use and is linked to your Google account. This makes it easy to use it on multiple devices, or to find the codes when you switch smartphones, for example.

LastPass Authenticator – In addition to a password manager, LastPass also has an app for 2FA. You do need a LastPass account for this, but it’s an excellent app that you can use for free.

Authy – This is another good option for two-step verification. This user-friendly app supports all kinds of services and synchronizes across your different devices.

Tip: There are more 2FA apps in the App Store that you can use.

5. How do I set up two-step verification for my Apple ID?

Two-step verification for your Apple ID is also important. Your Apple ID is connected to all your purchases, so you can find your iPhone if you lose it and so on. This account should not fall into the wrong hands. To secure your Apple ID, complete the following steps:

Go to your Apple ID in the iOS settings menu;
Choose ‘Password and security;
Select ‘Two-factor authentication’.

You can also write down a recovery code to log in if you have lost your device.

6. How does two-step verification work with Google, Facebook, Instagram and Twitter?

The annoying thing about setting up 2FA is that you have to do it for every account. It takes time, but it is worth it. In every application, you have to dive into the settings to enable two-step verification. That can take some searching.

Google: Go to this link to turn on two-factor authentication for your Google account.
Instagram: Go to the settings menu and look under the heading ‘privacy and security’ for ‘two-step verification’. There, choose text message or verification app.
Twitter: Go to the settings menu and choose ‘Account> Security> Login verification’.
WhatsApp: Go to settings, select ‘Account’ and then ‘Verification in two steps’.
Facebook: In the settings menu, go to ‘Security and login’ and select ‘Use two-step verification’.

If you are still concerned with your security, it is also smart to log in via Facebook in other places as little as possible.

Two-step verification explained: 6 things you need to know