Two-Factor Authentication (2FA): What It Is, Why It Matters, and Why You Should Set It Up Today

Two-factor authentication: Your digital guardian angel

In our increasingly digital world, protecting our online accounts has become more crucial than ever. Enter two-factor authentication, or 2FA for short—your digital guardian angel in the fight against cybercrime. Let's dive into what 2FA is, why it’s so important, and why you need to set it up today.

What is 2FA?

2FA is a multi-factor authentication process. It's like adding a deadbolt to your digital front door. While a password is your first layer of defense, 2FA adds a second, ensuring that even if someone steals your password, they still can’t get in.

2FA requires two forms of identification to access your account—hence, “two-factor.” It’s designed to verify your identity through something you know (your password) and something you have or are (like a one-time code or a fingerprint). Unlike passwords that can be reused, 2FA codes are single-use, generated each time you log in.

The process is like getting into a high-security event. Imagine needing both an ID and a unique ticket to get in. With 2FA, you’re essentially showing proof of identity twice.

How does 2FA work?

Once you enable 2FA, here’s what happens when you log in:

1. Enter your username and password—the usual step.
2. The system prompts you for a second form of verification.
   • This second factor could be:
     1. A one-time code sent to your phone via SMS or email.
     2. A code from an authenticator app, like Google Authenticator.
     3. A biometric factor, such as a fingerprint or facial recognition.

Only after providing both factors are you granted access to your account. It’s like having a bouncer who not only checks your ID but also makes sure you’re on the VIP list!

Why 2FA matters

In today's digital landscape, relying on passwords alone is like leaving your house key under the doormat—convenient but not very secure. Cyber threats are evolving rapidly, and relying solely on passwords is no longer enough. Here’s why 2FA is a game-changer:

1. Enhanced security: Even if a hacker gets hold of your passwordd, they can't access your account without the second factor.
2. Protection against common attacks: 2FA can block over 99.9% of account attacks, including phishing and credential stuffing.
3. Peace of mind: With 2FA, you can rest easy knowing your accounts have an extra layer of protection.

Why you should set up 2FA today

Still not convinced? Here are some compelling reasons to enable 2FA right now:

1. Your data is precious: From sensitive financial information to personal photos, your online accounts hold valuable data. 2FA helps keep it safe.
2. Passwords alone are vulnerable: Even the strongest passwords can be compromised. 2FA provides that crucial backup layer.
3. It's user-friendly: Modern 2FA methods are quick and easy to use. A few extra seconds during login can save you from a world of trouble.
4. It's becoming standard: Many services now require or strongly recommend 2FA. Embracing it now prepares you for the future of digital security.
5. Protects against human error: Mistakes happen. Whether you accidentally share your password or fall victim to a phishing scam, 2FA gives you a second chance to keep your accounts secure.

Set up Two-Factor Authentication

1) In your portal, navigate to Settings > Login Options

2) Click Set up next to two-step authentication.

3) Open your authenticator app and scan the QR code displayed in the popup. This will add a new account to your authenticator named Practice Better with your PB email address displayed, e.g. Practice Better ([email protected])

4) Enter the 6-digit verification token generated by the authenticator app into the popup to complete the 2FA setup.

Backup Codes

After setting up your 2FA, you will be prompted to download a list of one-time use backup codes. Download and print these codes and store them securely; they can be used if you are unable to provide a verification code from an authenticator app.

A backup code can be used by selecting Use backup code on the two-factor authentication screen.

You can view your current list of backup codes on your Settings > Login Options page. Click the More Options menu (3 dots) and select Get backup codes from the options provided. You can also regenerate a new list of backup codes from the same menu.

Trusted Devices

By default, you'll be prompted to enter a 2FA verification token every time you sign in to your portal. Optionally, you can choose to trust your device and skip 2FA verification for 30 days. The 2FA verification prompt will only be skipped when using the browser (e.g. Chrome) on the device you enabled trust for.

Enable the trust option on the 2FA verification screen and then enter a valid token from your authenticator app to continue:

You can delete the list of trusted devices from the 2FA More Options menu on the Login Options page.

And that’s it! You’ve successfully set up 2FA, making it much harder for anyone to access your account without your permission.

Important reminders for 2FA

1. Strong passwords still matter: Even with 2FA, having a strong, unique password is crucial. Avoid reusing passwords across multiple accounts.
2. 2FA is device-linked: Your authentication is tied to your device, not your phone number. If you get a new phone, you’ll need to transfer your authentication app data or repeat the 2FA setup process.

‍