How to Set Up Two Factor Authentication — UK Guide 2026
Updated July 2026 · 7 min read · By Silent Erase | ICO Registered C1971457
Two factor authentication (2FA) is the single most effective step you can take to protect your online accounts. Even if a criminal has your password they cannot access your account without the second factor. Yet fewer than 30% of UK internet users have enabled it on their most important accounts.
The statistics are stark:
Microsoft reports that accounts with 2FA enabled are 99.9% less likely to be compromised. It takes less than 5 minutes to set up and it is free. There is no good reason not to have it on every important account.
What is Two Factor Authentication?
Two factor authentication adds a second verification step when you log in. After entering your password you are asked for a second piece of evidence — usually a code from an app on your phone or a text message. Even if someone has stolen your password they cannot log in without also having access to your phone.
Types of 2FA — From Least to Most Secure
📱
SMS Text Message Codes A code is sent to your phone by text. Better than nothing but vulnerable to SIM swap attacks where criminals take over your phone number. Avoid for banking if an authenticator app is available.
🔑
Authenticator Apps Apps like Google Authenticator, Microsoft Authenticator or Authy generate a new 6-digit code every 30 seconds. Not vulnerable to SIM swap attacks. This is the recommended method for most accounts.
🔐
Hardware Security Keys Physical USB or NFC keys like YubiKey provide the strongest 2FA protection. Required to physically touch the key to log in. Recommended for high-value accounts like email, banking and password managers.
Best Authenticator Apps (All Free)
Google Authenticator — Simple, reliable, works on iPhone and Android. Best for most people.
Microsoft Authenticator — Works for Microsoft accounts and any other 2FA. Includes cloud backup.
Authy — Best option if you want to back up your 2FA codes to the cloud in case you lose your phone.
Apple Passwords — Built into iPhone and iPad. No separate app needed if you use Apple devices.
How to Set Up 2FA — Step by Step
1
Download an authenticator app Download Google Authenticator or Microsoft Authenticator from the App Store or Google Play. It is free and takes 30 seconds.
2
Go to your account security settings On the service you want to protect go to Settings → Security or Privacy → Two Factor Authentication. Every major service has this option.
3
Scan the QR code Open your authenticator app, tap the + button and scan the QR code shown on the website. This links your account to the app.
4
Enter the 6-digit code to confirm Your authenticator app will show a 6-digit code. Enter it on the website to confirm the setup is working correctly.
5
Save your backup codes Most services provide backup codes in case you lose your phone. Save these somewhere safe — a printed note in a secure location works well. Do not save them only on your phone.
Where to Enable 2FA First
Enable 2FA on these accounts in this order of priority:
1. Your email account — highest priority. All password resets go here. 2. Your bank and financial accounts 3. Your password manager 4. Social media accounts 5. Shopping accounts (Amazon, eBay) 6. Any account that stores payment details
Never share 2FA codes:
No legitimate organisation will ever ask you to share a 2FA code with them over the phone or by text. If someone asks for your authentication code it is always a scam — hang up immediately.
Get Weekly Security Tips
Practical cybersecurity advice for UK residents delivered weekly
Check If Your Accounts Have Been Breached
Silent Erase monitors the dark web daily for your email address and alerts you instantly to new breaches