What is two-step verification?

What is two-step verification?

Two-step verification is an extra security. This means that online access to sensitive matters, such as internet banking, is better protected.


A person can make themselves known in different ways. For example, a passport shows who you are. As well as an identity card. Both apply to the Dutch government as proof of identity. You must also constantly identify yourself on the internet. Logical, because you don’t want someone else to run off with your money. Online identification for a long time was done through the combination of a user-chosen username and password. Not very secure because this data can be stolen or intercepted.

It is safer if someone has to confirm their identity in several ways. There are three options:

  1. what anyone knows
    For example a username with password.
  2. what someone has
    For example a telephone. Where an SMS code can be sent.
  3. what someone is
    For example, a fingerprint or a face.

Combine two of these things and voilà; that’s two-step verification. For example, users must first enter their username and password. Then they receive a text message on their smartphone. Only those who enter the SMS code will be granted access.

You may have encountered two-step verification before. Some sites with a DigiD login use this extra security. Many large companies such as Apple, Google, Facebook and Microsoft also do this. Below are a few companies that provide information on how they apply two-step verification:

Recent Articles

Related Stories