Turn on 2-step verification (2SV) — by NCSC (UK)

beginnerpageLink only (©)

Explains how a second check at login keeps criminals out of email, banking and social media accounts even if they have your password. Points to setup guides for popular services such as Gmail, Outlook, Instagram, Amazon and Apple ID.

Quick steps

Open the account's security settings
Find the 2-step verification option (it may be called 2FA or MFA)
Choose a method such as a code, authenticator app, fingerprint or card reader

Paraphrased from the source. Menus can differ by version, so check the original for full details.

Read the full article on ncsc.gov.uk

Source: Turn on 2-step verification (2SV) by NCSC (UK). Licence: Link only (©).

Source reviewed: 2026-11-02
Link checked: 2026-11-02
Tested hands-on: Not by Oddbyte.Me

2sv2faemailaccounts

More in Passwords & 2FA

Creating Strong Passwords — by Electronic Frontier Foundation

beginnerpage

Part of EFF's Surveillance Self-Defense guide. It argues for a different password on every account to limit damage from leaks, with a password manager doing the work, and a random multi-word passphrase for high-value logins such as your device and the manager itself.

Managing your passwords — by NCSC (UK)

beginnerpage

Advice on using a unique strong password per account and why to enable two-step verification first. Describes how browser-based and third-party password managers store, generate and autofill passwords and can warn about breaches.

Three random words — by NCSC (UK)

beginnerpage

The NCSC shows how chaining three unrelated words makes a password that is hard to crack but still memorable. It also warns against personal details and predictable character swaps, and mentions password managers as an alternative.