Two-Factor-Authentification

Two-Factor Authentication

When logging into an online account, two (or even more) steps are often required: in the case of two steps, this process is called two-factor authentication, or 2FA for short.

After your username and password, you will be asked for further information when you log in. This can be, for example, a one-time password or answering a security question. Alternatively, an item such as a credit card or your fingerprint is needed. This extra step of verifying that you are really the person who owns the account provides greater security and better protection against someone else accessing your account.

How does 2FA work?

2FA is requested at the time of login for most user accounts, such as your online bank account. Each time you log in to the account, you enter the required personal information (username or email) and a password. In the next step, depending on the method you have chosen, you will receive, for example, a one-time password sent to your email or to a mobile phone application. This often consists of six randomly generated numbers. You then type this on the website, in the open window provided for this purpose. If it is entered correctly, then you will be successfully logged in to the account.

What are the options for the second step in 2FA?

Your digital identity can be further secured by:

A one-time password (OTP) that will be sent to you either by email, SMS, or generated by the token.
A security question, the answer to which you have determined in advance and which only you should know.
An object, such as a credit card or USB stick, containing your personal data.
Biometric data, such as fingerprint or facial recognition, which can uniquely identify you.

How do you enable 2FA?

Many companies will ask you to enable 2FA protection during account creation. When creating your user account, you will be guided through the service’s security features and can often choose between different options, including 2FA. If you did not set up 2FA protection when you created your account, you can often set this afterwards in the account settings of the website under the heading Security.

What are the benefits of 2FA?

Security is increased because someone else would have to gain access to two different devices in order to log in.
You are thus protected against unauthorized access to your personal data and accounts. You’ll receive an email or text message notification in case someone else tries to log in to your account, so you’ll be warned.
If you have forgotten your password, you can reactivate your account following the further security steps.

What are the disadvantages of 2FA?

Two-step authentication is a bit more time-consuming.
If a physical item is chosen as the second step, it can be lost or broken.
In urgent situations where you don’t have the selected device at hand for the second step, you can’t log in. That’s why it’s always important to set up the recovery method as well.