Ready Kids › Online Ready › Badge 6 › Lesson 6.2
All courses›Online Ready›Badge 6
Two-step, on the accounts that matter
Turn on two-step verification for one account and know what a code you did not ask for means.
1Watch
The code that arrived
Unasked
A phone lights up on a desk: 'Your login code is 482 917'. The kid is across the room, not logging in to anything. She looks at it. It ends on her picking up the phone.
18 secondsShe did not ask for that. So who did?
2The idea
The second lock
Two-step means your password alone is not enough: the account also wants a code from your phone. It turns a stolen password into a locked door instead of an open one. Somebody on another continent can have your password and still be standing outside.
It does something else, too. A code you did not ask for is a message: somebody has your password and is at the door right now. The lock held. The password did not. Change it tonight, and think about where else you used it.
3The idea
Switching it on, and the two rules after
1. Settings, then Security or Login. The name changes; the place does not.
2. Find Two-step, Two-factor, or 2FA.
3. Choose an authenticator app if it offers one, or a text code if not.
4. Save the backup codes it gives you. Notebook, drawer, home.
Start with your email, because everything else resets through it.
Then two rules. A code you did not ask for means change the password now. And a code is only ever typed into the app that sent it. Never read out on a call, never sent in a chat, never given to anyone who says they are support, whoever they sound like.
4The idea
Watch it work once
Ava, nine at night, a code arrives for her email. She is not logging in. She does not share it with anyone and she does not ignore it. She opens her email on her laptop, goes to Security, and sees a login attempt an hour ago from a city she has never been to. Blocked, because the code never got typed.
She changes her email password to four new words. The password had leaked from somewhere; the second lock was the only thing that mattered that night, and it worked. Then she turns two-step on for her chat app as well, because it took two minutes the first time.
5Build it
Switch it on
Two-step walkthrough
A mock account settings page. Find Security, find two-step, choose the app or text option, and finish the setup. The card checks each tap and then shows where it hides on the three most common apps.
It lives under Security or Login on every app. The words change; the place does not.
6Decide
A code arrives. You did not ask for one. It says 'do not share this code'. What just happened?
Pick one to carry on.
7Look
Where it hides
Three settings pages
Three phone screens side by side, each with the two-step option circled: one under Security, one under Login, one under Privacy and safety.
The button has a different name on every app. It is always within two taps of Settings.
8Find them
Which of these accounts are worth two-step?
Tap the ones that count.
Find all 4.
9Say it
What an unasked code means
Say it like a fact you already knew
“A code I did not ask for means someone has my password.”
You will need it the night one arrives and your first thought is ‘weird’, and your second thought is to swipe it away.
10Do it
Before you leave this page
Switch two-step on for one account tonight. Start with your email, because it is the one everything else resets through. Ask a parent to sit with you if you want; it takes about two minutes.
Tick it when you have done it.
Lesson done.
Two-step on anything that matters. A code you did not ask for means someone has your password.
Next lesson: Nobody needs your codeBadge 6 · Passwords and Locks
6.1A password worth having6.2Two-step, on the accounts that matter6.3Nobody needs your code★Badge Challenge