Two-step verification and passkeys
Two-step verification protects your MalwareTips account even if your password is stolen. After you enter your password, you confirm the login with a second step that only you can complete.
Why it matters
Passwords are stolen more often than most people think, through password reuse, phishing pages and information-stealing malware hidden in cracked software or fake downloads. With two-step verification turned on, a stolen password is not enough to take over your account.
Choose your method
Passkey Recommended
Confirm logins with your device's fingerprint, face or PIN, or with a hardware security key. Passkeys are fast and resistant to phishing.
Authenticator app
Get a new 6-digit code every 30 seconds from an app such as Microsoft Authenticator, Google Authenticator, 2FAS, Aegis, Ente Auth or your password manager.
Email code
Receive a one-time code by email. Convenient, but only as secure as your email account.
Backup codes
One-time codes you can use if you lose your phone or security key. Store them somewhere safe.
How to turn it on
Open your security settings
Log in and go to Password and security.
Open two-step verification
Next to Two-step verification, click Change, or go straight to the two-step verification page.
Enable a method
Click Enable next to the method you want and follow the instructions on screen. For an authenticator app, scan the QR code with the app and enter the code it shows.
Save your backup codes
After setup, MalwareTips shows a list of backup codes. Each one works once. Save them in your password manager or print them and keep them somewhere safe.
Signing in
After your password, you will be asked to complete your second step. On a device you own, you can choose to trust it for a while so you are not asked every time. Anyone who tries to log in from another device will still need the second step.
Lost a device? Use a backup code to log in, then open the two-step verification page and click Stop trusting for devices you no longer use.