Two-step verification

Two-step verification adds a second check when you sign in, on top of your password. After typing your password, you also approve a prompt in an app, enter a short code, or use your fingerprint or face. This means a criminal who steals your password still cannot get in without the second step. Turn it on for your email first, because email is used to reset most other accounts, then banking, social media and shopping. Never share the codes with anyone who calls or messages you. Real companies do not ask for them, and handing one over lets a scammer sign in as you.