Loading page
About this tool
Step-by-step two-factor authentication setup for Gmail, Apple ID, Microsoft, Facebook, Instagram, X, LinkedIn, Amazon, GitHub, Telegram and net banking.
Turn on two-factor authentication for each important account with the exact steps for that service, the strongest method it supports, and what to save so you are never locked out. This page brings together 11 separate two-factor authentication setup guide pages (Amazon, Apple ID, Facebook, GitHub, Gmail, Instagram, LinkedIn, Microsoft, Net banking, Telegram, X (Twitter)) so you can compare them without hunting for the right one.
Open Two-Factor Authentication Setup Guide on AltFTool — it loads instantly in your browser.
Choose your account at the top: Amazon, Apple ID, Facebook, GitHub and 7 more. On a phone it is a drop-down list.
Fill in the two-factor authentication setup guide for that account; each of the 11 options keeps its own rules, data and defaults.
Read the result, then switch account to compare. The page link keeps your account (?v=amazon), so you can bookmark or share it.
Amazon, Apple ID, Facebook and the rest sit behind one picker, so switching account takes a tap instead of a new search.
Every account keeps its own rules, numbers and defaults rather than one generic template.
The link remembers the account you picked, so a bookmark or a shared link opens straight on it.
11: Amazon, Apple ID, Facebook, GitHub, Gmail, Instagram, LinkedIn, Microsoft, Net banking, Telegram, X (Twitter). Pick one at the top of the tool; the page link updates (for example ?v=amazon) so you can bookmark or share that exact view.
Go to Your Account > Login & Security > Two-Step Verification (2SV) Settings and choose Get Started. Pick Authenticator App and scan the QR code with any TOTP app rather than choosing Phone Number, then add the backup method Amazon asks for before finishing.
On iPhone or iPad go to Settings, tap your name, then Sign-In & Security > Two-Factor Authentication and turn it on. On a Mac use System Settings > your Apple Account > Sign-In & Security. Apple Accounts created in recent years have it enabled by default, so you may find it is already on.
Go to Settings & privacy, then Settings, then Accounts Center, then Password and security, then Two-factor authentication, and pick the profile you want to protect. Accounts Center handles each linked Facebook and Instagram profile separately, so switching it on for one does not switch it on for the others.
Yes for accounts that contribute code on github.com. GitHub rolled out a requirement covering all such users, so an account that has not enrolled is eventually restricted until it does. Enterprise and organisation owners can also enforce 2FA for every member of their organisation.
Yes for phishing resistance. A passkey or hardware security key is cryptographically bound to the real Google domain, while an authenticator code can still be typed into a convincing fake sign-in page.
Yes. SMS can be weakened by SIM swap or number-port attacks, while authenticator app codes are generated on your own device.
Open Settings & Privacy > Sign in & security > Two-step verification, choose Set up, and pick Authenticator App instead of Phone. LinkedIn asks for your password, shows a QR code to scan into an authenticator app, and then displays single-use recovery codes that you should save immediately.
Sign in at account.microsoft.com, open Security, choose Advanced security options, then turn on Two-step verification and follow the prompts. Set up the Microsoft Authenticator app during that flow rather than relying on SMS, and save the recovery code the same page offers.
Under the RBI circular on limiting customer liability, reporting within three working days of noticing the transaction normally leaves you with zero liability. Reporting on the fourth to seventh working day limits your liability to a capped amount that varies by account type, and longer delays are governed by the bank's own policy, so report the same day you see it.
Open Settings > Privacy and Security > Two-Step Verification and set a cloud password, a hint and a recovery email. From then on, signing in on a new device needs the SMS or email login code plus that password, which is what stops a SIM swap from being enough.