EXIT CHAT CONTROLContentsQuiz

PART 11 · SECURITY · 2FA · 🟡

Two-factor auth & hardware keys

A password, even a strong one, can leak. Two-factor authentication (2FA) adds a second proof at login: even if your password is stolen, the account stays locked. It’s essential on your sensitive accounts (email, password manager, social).

Avoid SMS 2FA

A code sent by SMS is the weak link: it’s vulnerable to “SIM-swap” (an attacker gets your number transferred) and to interception over the phone network (SS7). Studies estimate most SIM-swap attempts succeed. Use SMS only as a last resort, never as your main protection.

YubiKey · Nitrokey

🟡🔴 Interm. / AdvancedFIDO2 hardware keyPaid

What it's for

A small physical key (USB, often with NFC) that proves your identity with a single touch.

Why it matters

It’s the strongest 2FA: it resists phishing, because the key checks the site’s real address before responding. Nitrokey is the fully open-hardware, open-firmware alternative. A fake site can’t trick you.

For whom & when

Those who want maximum security on key accounts. Buy two (one main, one backup).

Install & use
  1. Get two keys from yubico.com or nitrokey.com.

  2. In each account’s security settings (email, password manager…), add a “security key” or “passkey.” Enrol both keys.

  3. Keep the backup key in a safe, separate place.

Aegis · Ente Auth

🟢 BeginnerTOTP codes🌍 · open-sourceFree

What it's for

Apps that generate the six-digit codes changing every 30 seconds, replacing Google Authenticator.

Why it matters

Aegis (Android) keeps your codes in a local encrypted vault, no cloud. Ente Auth adds end-to-end encrypted sync across devices, and has been audited. Far safer than SMS, and free.

For whom & when

Everyone: it’s the default 2FA level to adopt, ahead of hardware keys.

Install & use
  1. Install Aegis (F-Droid) or Ente Auth (all platforms).
  2. On each account, enable “authenticator app” 2FA and scan the QR code shown.

  3. Write down the backup codes on paper and make an encrypted backup of your vault.

Not sure where to start? Take the 12-question quiz →