When you set up Google Authenticator for 2-factor authentication, the account security settings will either display a QR code or a 32-digit code (or both).Ĭlick the “+” button on the top right corner of the Google Authenticator app and choose “Scan barcode”.

Scan the QR Code or Enter Code Manually.

In the example here, you’ll see the 2-Factor Authentication settings from within Facebook. Most major social platforms (Facebook, Instagram, Twitter), email providers and investment accounts will offer 2FA, but not all of them do. Within the security settings of many online accounts, you’ll find an option for 2-factor authentication (2FA).

Locate 2-Factor Authentication Settings.

I recommend you download the app on your phone instead of a tablet, since you’ll need to have the device always with you when a code is required.

It’s free to download and use, so there’s no need to pay any subscription fee.

The Google Authenticator app is available on both the iOS App Store as well as the Google Play store. As a Bitwarden user you're already ahead of the curve in password security.In order to use Google Authenticator as a form of 2-factor authentication, take note of the following steps. The question of whether or not you should is one only you can answer and it depends entirely on your comfort level. Which raises the age not-so-old question, is a synced TOTP authenticator secret real MFA? Something you have is not something you have if the thing that makes it unique is synced to a cloud service and can be duplicated by anyone who gains access to it. If you enable a TOTP authenticator and email '2FA', you no longer need the thing you have, negating the entire point. To be true MFA, you need to cover at least two categories. Fingerprint, facial recognition, iris scan, etc. no web-based access) but it is laughably insecure. Technically SMS would be MFA if you only have SMS access on your one device (i.e. Some sort of physical cryptographic identification device. It is just another thing you know (the password to your email, which is just making two passwords). Adding an email isn't adding another factor. Email MFA is not real MFA and you're removing an important part of the equation by enabling it. You can, but it violates the principle behind MFA in the first place.

Linkedin google authenticator