Loading page
About this tool
Weighted 15-step checklist to enable LinkedIn two-step verification, save recovery codes, clear old sessions and lock down profile discovery.
This guide is a weighted, 15-control checklist for locking down a LinkedIn account: two-step verification with an authenticator app, saved recovery codes, a verified primary email, clean sessions, and the visibility settings that decide who can find you. Each control carries a score share based on how much it blocks a real takeover, and four of them are marked critical, so the score stays capped at 69% until all four are done. It is aimed at anyone whose job search, client work or professional reputation lives on LinkedIn and who wants a definite finish line rather than a vague sense of being secure.
Open LinkedIn 2FA Setup Guide on AltFTool — it loads instantly in your browser.
Add your input to the workspace.
Adjust the options until the result looks right.
Copy or download the output and put it to work.
Controls are scored by takeover impact, so the password and second factor count for far more than a visibility toggle.
The score refuses to rise above 69% while any critical control is open, which stops a false sense of safety.
The checklist runs entirely in your browser and never asks for your LinkedIn password, phone number or a verification code.
Open Settings & Privacy > Sign in & security > Two-step verification, choose Set up, and pick Authenticator App instead of Phone. LinkedIn asks for your password, shows a QR code to scan into an authenticator app, and then displays single-use recovery codes that you should save immediately.
Yes, because SMS codes can be intercepted through a SIM swap, where an attacker persuades your mobile operator to move your number to their SIM. An authenticator app generates the code on your device using the TOTP standard, a 6-digit code refreshed every 30 seconds, so nothing travels over the phone network.
Sign in with one of the recovery codes LinkedIn gave you when you enabled two-step verification; each code works once. If you did not save them, you have to go through LinkedIn's identity verification, which typically means uploading a government ID and waiting for manual review, so save the codes before you need them.
LinkedIn supports passkeys, which appear under Sign in & security when your account and device are eligible. A passkey signs you in with your device unlock instead of a typed password and cannot be handed to a phishing site, because the browser will only release it to the genuine linkedin.com domain.