DPE

Return to Contents

The DPE Guide to 2FA Setup and Securing your account on Gmail, Facebook, and Instagram.

Two-factor authentication (2FA) is an extra layer of security used to ensure that people trying to gain access to an online account are who they say they are.

First, the user enters their username and a password, then, instead of immediately gaining access, they will be required to provide another piece of information.

This second factor could be:

A code is sent to your phone.
A code generated by authenticator app.
A biometric factor like a fingerprint or facial recognition

Why You Need 2FA:

Even if someone steals your password, they won’t be able to access your account without the second factor.
It adds a simple yet powerful security measure to prevent account takeovers.

Different 2FA Methods

There are several ways to set up 2FA. The most common methods include:

SMS-based 2FA: You receive a one-time code via text message.
- Pros: Easy to set up and use
- Cons: Less secure because attackers can intercept SMS messages.
App-based 2FA (Recommended): You use an authenticator app (e.g., Google Authenticator, Authy) to generate a one-time code.
- Pros: More secure than SMS. Codes change every 30 seconds.
- Cons:Requires installing an app on your phone.
Hardware-based 2FA: Uses a physical security key (e.g., YubiKey).
- Pros: Extremely secure.
- Cons: Requires purchasing a physical device.

For this guide, we’ll focus on app-based 2FA, which is the most secure and widely used method.

How to Set Up 2FA on Google (Gmail)

How to Set Up 2FA on Facebook

How to Set Up 2FA on Instagram

Using Authenticator Apps vs SMS

Using an authenticator app is highly recommended over SMS-based 2FA for several reasons:

Security: SMS codes can be intercepted through SIM-swapping attacks, while app-based codes are generated on your phone and change every 30 seconds.
Convenience: Authenticator apps work offline, and you don’t need cellular service to receive the codes..
Multiple Accounts: You can manage several accounts (Google, Facebook, banking apps) from one authenticator app

Popular authenticator apps

Google Authenticator: Simple and secure.
Authy: Offers backup and multi-device sync.

Backup Options and Best Practices

1.Backup Codes:

When setting up 2FA, most services provide backup codes in case you lose your phone or can't access the authenticator app. Print these codes or store them in a safe place.

2.Backup Phone Number:

Add a trusted backup phone number to your account (family member or trusted friend).

3.Review 2FA Settings Regularly:

Make sure your 2FA settings are up-to-date. Regularly check backup methods and update them when needed.

Common Mistakes to Avoid

Not Backing Up Your 2FA Codes: Always store backup codes safely. If you lose access to your authenticator app without backup codes, you may be locked out of your account.
Using Only SMS for 2FA: If possible, avoid SMS-based 2FA, as it’s vulnerable to SIM-swapping attacks.