What You Need to Know
MFA adds a second step to logging in: a code, an app approval, a passkey, or a hardware key. Even a stolen password is not enough on its own.
Why It Matters
It is the single most effective consumer security control available, and it is free on nearly every major service.
Warning Signs checklist
- Important accounts protected by password only
- Approval requests you did not initiate
- Recovery codes never saved
- MFA turned off for convenience
How to Protect Yourself steps
- 1Add MFA to email first, then banking and social
- 2Choose an authenticator app or passkey when available
- 3Save recovery codes in your password manager
- 4Deny any prompt you did not trigger, then change that password
Quick Checklist
- Add MFA to email first, then banking and social
- Choose an authenticator app or passkey when available
- Save recovery codes in your password manager
- Deny any prompt you did not trigger, then change that password
Helpful Resources
- The Curiosity EditLong-form essays on cyber, AI, and everyday technology.
- Career GalaxyDiscover the careers built around this exact problem.
- Government resourcesOfficial reporting and recovery links, being verified before we publish them.
- Trusted nonprofitsCommunity partners offering free education and support, list in progress.
Follow the Rabbit Hole