Why enable it

Two-step verification asks for an extra password when signing in on a new device, so an intercepted SMS code alone is not enough.

Setup

  1. Settings → Privacy and Security → Two-Step Verification;
  2. Set and confirm a password;
  3. Add a recovery email (strongly recommended) and a hint.

If you forget it

  • With a recovery email: reset by mail, usually instantly;
  • Without one: wait about seven days before resetting; new logins are blocked meanwhile;
  • After a reset, all signed-in devices are logged out.