Multi-factor authentication means proving your identity with multiple methods (“factors”), which significantly increases the difficulty for someone trying to break into your accounts.Ī common variant of multi-factor authentication is referred to as two-factor authentication (2FA), which is generally comprised of “something you know” (an intangible secret like your password) and “something you have” (a physical object like your mobile phone, a small hardware device on your keychain, biometrics, etc).

Use multi-factor authentication (MFA) 3.That’s where an additional best practice becomes critically important: You’ll have access to your passwords on multiple devices, and through browser plugins.Įven when you follow these guidelines, it is possible for your password to be disclosed if an app or service itself is compromised, or if you’re tricked into entering your password into a fake form (i.e. This helps you generate strong passwords without having to remember them. Use an encrypted password manager 2 that is routinely security audited.Otherwise, if one account is compromised then they all are vulnerable. Don’t reuse passwords between accounts.Don’t use dictionary words, family member names, important dates, etc. That’s a fancy way of saying your password should be something difficult for computers to guess – even when there are many machines working together for a significant amount of time. You should already be following the best practices for passwords, including:

With this information, a criminal can assume your identity and cause you a lot of lasting damage. Logging in with two-factor authenticationĪ common target of cybercrime is authentication details for online accounts – usernames, email addresses, passwords, answers to account recovery questions, etc.Configuring 1Password to generate one-time passwords.Configuring the two-factor authentication policy.

Use 1password for 2fa