Two-factor authentication · Lập trình với Martin

One password is not enough — a second gate

Two-factor authentication (2FA) means: you need two things for the account. Usually a password and something else — a code from an app, an SMS, a fingerprint, a confirmation on a second device. Whoever steals only the password still does not get through. It is a second gate.

Imagine a house: a key to the door + a code for the alarm. The password is the key. The second factor is the alarm. Without both you are not inside.

Trường sometimes has 2FA set for you. Family email, a game, an important account — you switch it on with a parent. Not with a stranger’s “how-to” from chat.

⚠️

You do not read an SMS code to anyone. Not to a friend. Not to “support”. Not even when they say they are from a bank or a game. The code is a key for a moment. Whoever wants it in chat is a scammer.

Three kinds of second factor

An app (Google Authenticator, Microsoft Authenticator) — the code changes every 30 seconds. Better than SMS, when it is possible.
SMS — the code arrives on the phone. Better than nothing. Watch out for a SIM scam (Hunter).
Confirmation on another device — “Is it really you?” on a parent’s phone or your second one.

A parent helps switch it on. Backup codes (when you lose the phone) a parent saves in the vault, not you in chat.

💡

If a service offers “recovery codes”, print them or save them in the vault. They are một lần keys when the phone disappears. Not a selfie to Instagram.

Where to switch 2FA on

family email (Gmail, Outlook)
a game account where you have purchases
a school account — if school allows it, with a teacher

Not everywhere at once. Bắt đầu with one account with a parent. Trường may have its own rules.

What to say

“Gửi the SMS code so I can help you.”

“I do not send an SMS code. If it is you, it can wait for a parent.”

“Turn off 2FA so I can sign in.”

“I do not turn it off. I do not lend the account.”

How it fits the projects

🏠 Family rules. I do not read an SMS code or 2FA to anyone.

📱 Phone audit. Write: on which accounts is 2FA on / not.

Family vault — in the next lesson passwords and backup codes.

Now you 💪

With a parent, open the settings of one important account. Look whether 2FA can be switched on. If yes, switch it on together — or note “we will do it at the weekend”.

An account a parent picks (email, a game). Settings → security → two-factor.
Switch it on or note it on the audit. Backup codes into the vault — once you have it.
Into family rules: I do not send an SMS code.

✅

Check: You know what 2FA is. An SMS code not into chat. One service checked with a parent.

What to take from this lesson

A password + a second thing = 2FA.
You do not read an SMS code to anyone.
You switch it on with a parent, not from a link in chat.
Backup codes into the vault.