
From there, you can authenticate whatever else you need. Speaking of which, to add more devices to your Authy account, go to Settings, then Devices, and tap Allow Multi-device.

The extra cautious may prefer to keep their codes on a single device, but the cloud backup makes it possible to use Authy on more than just your smartphone-there's even a Chrome extension-and also makes switching to a phone much more seamless. Authenticator apps are not vulnerable to this problem, and thus are a more secure way to do two-factor verification.Īs with so many things, it's a matter of balancing security and convenience.įor instance! Go to Settings and tap Accounts, then toggle on Authenticator Backups if you want to create encrypted backups in the cloud. “Unfortunately, it isn’t that hard for thieves to impersonate you to your mobile phone carrier and hijack your mobile phone number-either with a phone call to customer support or walking into a phone store,” says Lorrie Cranor, a computer scientist at Carnegie Mellon University and former FTC technologist who had her own SIM stolen in 2016. By stealing your phone number, hackers can redirect any two-factor notifications to their own devices, allowing them much easier entry to your accounts. Specifically, it leaves you exposed if someone hijacks your smartphone’s SIM, a longtime problem that has only gotten worse of late. While certainly better than nothing, getting your 2FA from SMS has plenty of potential downside. Yes, the easiest way to implement two-factor is with SMS, receiving a text with an access code every time you try to log into a secured account. For better protection, you’re going to want an authenticator app. Not all two-factor is created equal, however.

That’s where access to Facebook or Twitter or your online bank-anything that supports it, really-requires not just a password but also a special code. Hopefully by now you’ve heeded the repeated warnings from your friends and loved ones (and friendly, beloved internet writers) to use two-factor authentication to secure your digital accounts.
