2 of 7

LESSON 3 · Protect Yourself Online

Not All 2FA Is Equal

  • SMS codes — convenient, but vulnerable to SIM-swapping attacks that hijack your phone number
  • Authenticator apps — time-based codes generated on your device, safer than SMS
  • Hardware keys (YubiKey, Titan) — physical devices immune to remote attacks, the most secure option
  • Biometrics — convenient, but usually treated as a supplement, not a standalone factor

Even SMS-based 2FA beats none. Upgrade to an authenticator app when you can, and reserve hardware keys for your most critical accounts.