Digital life

How to find which accounts use two-factor codes

A few places to look, about 15 minutes.

Most people don't remember which accounts ask for a code. The good news is that the list is usually hiding in a few predictable places.

Places to check

1. Your authenticator app. Every account it lists uses two-factor sign-in.
2. Your text messages. Searching for "code" or "verification" shows which companies text you codes.
3. Your password manager, if you use one. Many flag which saved accounts have two-factor sign-in turned on.
4. Your email. Searching for "verification code" or "sign-in code" finds accounts that email codes instead.
5. The big accounts directly. Your email, bank, Apple or Google account and mobile carrier each show it in their security settings.

What to write down

For each account, a short line is enough: the account name, where the code goes, and where any backup codes are kept. For example: "Chase: text to my cell. No backup codes."

If the list feels long, many people start with email, banking and the phone carrier, since those tend to unlock the rest.