Turn on two-factor everywhere in an afternoon
A weak password is survivable with 2FA; a strong one is not enough without it. A calm checklist for locking down the accounts that matter.
Turn on two-factor everywhere in an afternoon
A weak password is survivable with 2FA; a strong one is not enough without it. A calm checklist for locking down the accounts that matter.
Two-factor is the single highest-leverage hour you can spend on your security. Most account takeovers stop dead the moment a second factor is in the way.
Start with the keys to the kingdom
- Your email — it can reset everything else
- Your password manager
- Your bank and primary payment accounts
Prefer app codes or passkeys over SMS
SMS is better than nothing, but it can be intercepted. Use an authenticator app or a passkey where you can.
- Email secured
- Manager secured
- Everything else, one a day
The goal is not perfection today. It is one fewer easy door tomorrow.