How do you turn on two-step verification?

Passwords leak — millions of passwords have been spilled in data breaches at big sites, and many of them are being tried on other accounts too. That's exactly why two-step verification exists: even someone who knows your password can't get into your account without getting past the second step (the code on your phone).

Setting it up takes a few minutes in each app and barely changes your day-to-day use; the code is usually requested only when you sign in from a new device. Below you'll find the path for the most widely used accounts, one by one. Our advice is to turn it on for all of them in order — email first, because that's the recovery key for every other account.

1. Start with your email For your Google account, follow myaccount.google.com → Security → 2-Step Verification. Since your email is the recovery address for everything, it's the first account that needs protecting.
2. Set a PIN on WhatsApp WhatsApp → Settings → Account → Two-step verification. The 6-digit PIN you set is requested whenever someone tries to move your number to another device.
3. Instagram and other social accounts On Instagram: Settings → Accounts Center → Password and security → Two-factor authentication. X, Facebook and TikTok have a similar path too; the same logic works in all of them.
4. Choose an authenticator app instead of SMS When the option is offered, get the code from an app like Google Authenticator instead of SMS. SMS can be hijacked through fraudulent mobile operator transactions; an app code is generated only on your phone.
5. Save your backup codes Write the single-use backup codes you're given during setup on a piece of paper, or save them somewhere safe. If you lose your phone, these codes are how you get into your account — this is the step people skip most, and the one they regret most.
6. Move your codes when you change phones Before switching to a new phone, use your authenticator app's account transfer feature (Authenticator has an export option). Before resetting the old phone, confirm that the codes work on the new device.

⚠ This guide is general information. Yudum cannot be held responsible for the outcome of following it; for official procedures always rely on the institution's own statement. Steps and fees change over time.

🎯 Related content

How do you download and delete your data with Google Takeout? From photos to email, from location history to searches — what's in your account? Download it all, and have what you don't need deleted automatically. What should you do if your social media account is hacked? The first ten minutes are when getting the account back is easiest. In order: recovery, closing sessions, protecting linked accounts, warning the… Where do you report internet fraud? If you've lost money, the first hours are critical. Which incident goes to which institution, and which evidence you need to gather — in order. How to spot a scam message A parcel, a bank, e-Devlet, a prize draw... Fake messages all use the same patterns. Once you have learned those patterns, you don't fall for them… What to do if you forget your password No panic. If you gave an e-mail address it is a five-minute job — if you didn't, there is a section you need to read. How to set up your profile and avatar An empty profile looks like an empty chair. Five minutes and people start recognizing you.