Accounts
Two-factor authentication (2FA)
In Turkish: İki adımlı doğrulama (2FA)
A second proof, such as a code or a tap on your phone, required after your password so a stolen password alone is not enough.
With two steps, an attacker who learns your password still needs something only you have, usually your phone. It is one of the most effective things you can do for an account, and it takes a few minutes to turn on.
Not all second steps are equal. An authenticator app, a security key or a passkey resists phishing better than an SMS code, but any second step is better than none. Start with email, banking and your phone account.
What to do
- Turn it on for your email first, then banking and social accounts.
- Choose an authenticator app or a passkey over SMS when you can.
- Save the backup codes the moment you enable it.