# Add a second lock.

Make a stolen password less useful.

By Avenvale · Sources checked 2026-09-23
Canonical: https://avenvale.app/training/accounts/two-factor-authentication
Language: English

Two-factor authentication asks for another proof when you sign in. An authenticator app or security key is preferable to text codes when the service offers them.

## Try this

1. Open the account’s official security settings. Start with email, banking, and your password manager.
2. Turn on two-factor authentication and follow the provider’s setup instructions.
3. Store recovery codes somewhere protected. Approve only sign-ins you started; keep verification codes private.

## Practice scenario (fictional)

A sign-in approval appears when you are not signing in. What do you do?

1. Decline it and review the account in its official app
2. Approve it to stop the alerts

Safer response: Decline it and review the account in its official app

Unexpected approval requests deserve a check. Open the service independently and review its security activity. Text-code protection is still better than no second factor.

Lesson completion records practice, not a scan or certification.

## Official guidance

- [FTC · Two-factor authentication](https://consumer.ftc.gov/articles/use-two-factor-authentication-protect-your-accounts)