Online safety, scams and privacy
Understanding two-factor authentication
An introduction to the extra account check commonly called two-factor authentication.
What you will learn
You'll understand why two-factor authentication helps and what to prepare before turning it on.
Before you continue
Stop and get help before changing two-factor authentication if you are unsure how you would regain access after losing a phone, app or security key.
An extra check for your account
Two-factor authentication asks for another check after your password. Depending on the service, that check may use an authenticator app, security key, device prompt or one-time code.
Why it helps
A stolen password may not be enough to enter an account when another check is required. It does not remove every risk, so suspicious requests and unexpected prompts still deserve care.
Prepare for recovery
Before turning it on, review the provider's recovery options. Store backup codes somewhere secure and make sure recovery email addresses or phone details are current.
Treat unexpected prompts carefully
Do not approve a sign-in you did not start. Open the service through its official app or website and review recent account activity.
What to expect
You understand what the second sign-in check does and what recovery information should be kept safe.
Sources and further reading
- Protect Yourself: Multi-Factor Authentication · Australian Signals Directorate
How multi-factor authentication works and the importance of backup methods.