The one measure that removes the most risk for the least effort.
Two-factor authentication requires a second piece of evidence in addition to your password, usually a code from an app on your phone. Even anyone who knows your password will not be able to get in. For business accounts, this is the measure that removes the most risk per minute spent.
IN COMMON LANGUAGE
Where you turn it on first
On your email, because with that someone can reset all other passwords. Then your domain registrar, your hosting and your accounting.
An app that generates codes is safer than SMS, because a telephone number can be transferred to another device.
WHY IT MATTERS
What else you arrange
Save recovery codes in a safe place away from your phone. A lost device without recovery codes means a long road back.
And make sure that not everything depends on one person: if only you can join and you are unreachable, the company comes to a standstill.
- Email first — that resets everything else.
- Then domain and hosting — losing it is the most expensive.
- App over SMS — numbers can be transferred.
- Save recovery codes — outside your phone.
- Don't hang on to one person — arrange a second manager.
FREQUENTLY ASKED QUESTIONS
More about two-factor authentication
Isn't this cumbersome?
You notice it the first week, then barely. Contrast that with what an acquired email account costs: access to virtually all your other systems.
What if I lose my phone?
That is what the recovery codes you receive when setting up are for this purpose. Keep it in a safe place away from your phone: this is exactly when people discover they didn't do that.
Does this also apply to my website?
Certainly for management environments. We enable it where possible and ensure that there is more than one administrator, so that you are never dependent on one person.
CONTINUE READING
Of course, continue reading about this subject.
Access safe arranged?
We look at which accounts are critical and where your security first falls short.