Digital life

Two-factor codes, in plain English

The second lock on an account, and why it trips families up.

Two-factor sign-in (sometimes called 2FA or two-step verification) means an account asks for two things: your password, plus a second proof that it's really you. That second proof is usually a short code.

Where the codes come from

• A text message to your phone number
• An authenticator app on your phone, such as Google Authenticator or Microsoft Authenticator
• A pop-up on your phone asking "Is this you?"
• A small physical key that plugs into a computer or taps a phone

Why it matters for your family

Two-factor sign-in is very good at keeping strangers out. It also keeps your family out. Even with every password written down, they may still need the phone, its passcode, or a backup code to get in.

What families usually need to know

• Which accounts use it
• Where the codes arrive (which phone number or which app)
• Where any backup codes are kept

Keeping this extra security on is fine. What helps your family most is a note saying where the codes go.