Why MFA matters

MFA (multi-factor authentication) adds another verification step when you sign in, beyond just your password.

Even if a scammer has your password — from a leak, phishing, or a guess — MFA usually stops them from getting in, because they'd also need your phone, authenticator app, or security key.

Authenticator apps and passkeys are generally stronger than SMS codes, since SMS can be intercepted through a SIM swap.

Turning on MFA takes a few minutes per account and meaningfully reduces your risk.