Two-factor authentication (2FA) for email

Key points

• 2FA adds a second check beyond your password
• App-based authenticators beat SMS
• Protects against password theft
• Enforce it for your whole team

How to do it

1. Enable 2FA in your provider's security settings
2. Use an authenticator app or security key
3. Back up your recovery codes
4. Require it for admins

Common mistakes

• Using SMS only (SIM-swap risk)
• Losing recovery codes
• Not enforcing for the team