Start with your important accounts
Make a short list: your main email account, any business email, cloud storage and the social accounts you rely on. Review one at a time. You do not need to change every setting in one sitting.
Open the service using its normal app, a saved bookmark or an address you know. Avoid starting from an unexpected email that tells you to “secure your account”.
Find the account’s security settings
Look for a section called Security, Sign-in, Login or Account protection. Providers use different names. Two-factor authentication may be labelled 2FA, multi-factor authentication, MFA or two-step verification.
The setting should show whether protection is enabled and which methods are registered. A saved phone number by itself does not always mean an extra sign-in check is enabled. If you are unsure, check the provider’s own help page or ask for assistance.
Understand what you are seeing
An extra check might use an authenticator app, a security key or another supported method. Options and protection differ between providers. A passkey may use your device’s secure sign-in rather than a separate code.
You might not see a prompt every time because your device is remembered or you are already signed in. That alone does not tell you the setting is off. The account’s security page is a more useful starting point.
Check recovery before you finish
If you change or lose your phone, how will you get back in? Review the recovery methods offered by your provider. Where recovery codes are available, keep them somewhere safe and separate from the device you might lose.
Do not share codes with someone who calls or messages you unexpectedly. A request for a code deserves the same care as a request for your password.
If it is not enabled
Follow the provider’s current instructions to enable a supported method. For work accounts, check with the person who administers them first. Changing a business sign-in method may need coordination.
Take your time and confirm you can sign in with the new method before removing a previous one. If you need help, Josh can walk through setup and recovery options with you.
Further reading
For broader guidance, see these official resources:
General information, not a complete assessment of your environment. Provider settings and instructions can change.