Two-Step Login: The Second Lock Every Family Needs

Passwords leak all the time, often from websites you used years ago. Two-step login (also called MFA) means a stolen password isn't enough on its own.

The second step can be a code by text, a code in an authenticator app, or a passkey on your phone. Authenticator apps and passkeys are stronger than texts.

Scammers know this, so they try to get the code from you, often with a phone call pretending to be your bank. Nobody real needs your code.

Start with email, because email can reset everything else. Then add games, social apps and banking.

The rule from the episode: turn on the second lock.