How to Turn On Two-Step Verification (Google, WhatsApp, Facebook)

Two-step verification means that even if someone gets your password, they still can't log in without a second code. It takes a few minutes to set up and stops most account takeovers.

Google (Gmail, YouTube, Google Photos)

1. Go to myaccount.google.com and sign in.
2. Tap Security.
3. Tap 2-Step Verification and follow the steps.
4. Choose how to get codes. Google prompts on your phone or an authenticator app are safer than text messages.
5. Save the backup codes somewhere safe, like a printed copy at home.

WhatsApp

1. Open WhatsApp and go to Settings, then Account.
2. Tap Two-step verification, then Turn on.
3. Choose a 6-digit PIN that isn't your birthday or 123456.
4. Add an email address so you can reset the PIN if you forget it.

This stops someone from taking over your WhatsApp even if they trick you into sharing the code WhatsApp sends by text.

Facebook and Instagram

1. Open Accounts Centre from the Settings menu.
2. Go to Password and security, then Two-factor authentication.
3. Pick the account and choose an authenticator app or text message.
4. Save your recovery codes.

Use an authenticator app

Apps like Google Authenticator or Microsoft Authenticator create codes on your phone, even without signal. They're safer than text messages, because SIM-swap scammers can't intercept them.

Golden rules

• Never share a verification code with anyone, even if they say they're from the bank, WhatsApp or a friend. No real company will ask you for it.
• Use a different password for each important account. A password manager like Bitwarden makes this easy.
• Keep your backup codes safe. If you lose your phone, they're how you get back in.