Two-step verification: protect your business accounts in 10 minutes
A stolen password is one of the most common ways small businesses get hacked. Two-step verification stops most of these attacks. Here is how to switch it on.
By SmartNet SystemsPublished 1 min read
Citește articolul în românăPasswords get reused, guessed and leaked. Two-step verification (also called 2FA or multi-factor authentication) adds a second check when someone logs in, so a stolen password on its own is no longer enough.
Which accounts to protect first
- Email — whoever controls your email can reset every other password.
- Microsoft 365 or Google Workspace admin accounts.
- Online banking and payment accounts.
- Your domain registrar and website hosting.
- Accounting software and social media.
Which second step to choose
| Method | How secure | Notes |
|---|---|---|
| Passkey or security key | Very high | Resistant to fake login pages |
| Authenticator app | High | Free apps on your phone generate a code |
| SMS code | Basic | Better than nothing, but texts can be intercepted |
Switching it on
Look for Security, Sign-in or Two-step verification in each account's settings, choose an authenticator app or passkey, scan the code with your phone, and save the backup codes.
For Microsoft 365 or Google Workspace, an administrator can require two-step verification for everyone in the business — worth doing as soon as you have more than one user.
Need a hand?
I can switch on two-step verification across your business accounts, set up a password manager and show your team how it works.