2FA — on top of a password, you need a second factor. Supported by most services.
Methods
- SMS code
- Authenticator app (Google Authenticator, Authy)
- Hardware key (YubiKey)
- Biometric
Best choice
Authenticator app — safer than SMS (resists SIM swap).
Where to enable
- Hosting account
- Domain registrar
- Payment services
Backup code
After enabling 2FA, write down the backup code on paper — needed if you lose your phone.