MEPX
Chapter 3 of 10All chapters
  1. 1Who is actually after you
  2. 2Passwords
  3. 3Two factor authentication
  4. 4Phishing and social engineering
  5. 5Updates and patching
  6. 6Encryption
  7. 7Networks and public wifi
  8. 8Malware and ransomware
  9. 9Access and least privilege
  10. 10When something goes wrong

Chapter 3 of 10

Two factor authentication

Something you have as well as something you know.

The tiers

SMS codes are better than nothing but can be redirected by SIM swapping. An app generating codes is stronger, and a hardware key or passkey is stronger still because it checks the site's identity.

  • Turn it on for email, banking and anything holding payment details first.
  • Store the recovery codes somewhere offline before you need them.

Passkeys

A passkey replaces the password with a key held by your device and unlocked by your face or fingerprint. Nothing reusable is sent to the server, so there is nothing to steal or phish.