What the extra layer does
Multifactor authentication requires more than one kind of evidence to sign in. Someone knowing your password alone should not be enough. Look for this option in your account’s security settings.
Choose stronger options where available
Phishing-resistant options, such as FIDO security keys, offer stronger protection than methods that depend on entering a code into a website. Authenticator apps and number matching can still improve protection compared with relying on a password alone.
Plan for losing a device
Save recovery codes securely and check your recovery options before you need them. Do not approve a sign-in prompt you did not initiate. If unexpected prompts continue, investigate the account through its official app or website.