What is two-factor authentication (2FA)?
Two-factor authentication (2FA) requires users to provide two different forms of credentials when logging into an account or system, such as a password and a one-time code generated by a phone. It makes unauthorized access more difficult and is suitable for email, social media, financial services, e-commerce, and work accounts.
Core principles and functions
2FA typically combines “something you know” and “something you have.” The former is usually a password, while the latter may be a phone, hardware token, code generated by an authenticator, or biometric information. Even if the password is exposed, the attacker must still pass the second verification.
Common methods and trade-offs
SMS 2FA uses a phone to receive verification codes, which is convenient but may be affected by SIM SIM swap attacks; authenticator app 2FA can generate codes offline OTP, but requires advance setup; hardware token 2FA offers relatively strong security, but involves the costs of purchase, loss, or damage. Biometric 2FA and email 2FA also carry their own privacy, delay, or account-compromise risks.
Setup and secure use
When enabling 2FA, first select a method in the account’s security settings, complete the setup as prompted, and securely save the backup codes. It is recommended to enable 2FA for eligible accounts, continue using strong and unique passwords, never disclose OTP, and be alert to phishing; if a device is lost, immediately revoke access and update the settings.
Original Tutorial
https://www.binance.com/zh-CN/academy/articles/what-is-two-factor-authentication-2fa
Mark it complete when you understand it.
Opening a lesson does not complete it automatically. You can change its status at any time.