Add extra security with 2-Factor-Authentication

Two-factor authentication adds a second level of authentication to an account log-in. When you have to enter only your username and one password, that's considered a single-factor authentication. 2FA requires the user to have two out of three types of credentials before being able to access an account. 

The three types are:

Something you know, such as a personal identification number (PIN), password or a pattern
Something you have, such as an ATM card, phone, or fob
Something you are, such as a biometric like a fingerprint or voice print

HOW DOES TWO-FACTOR AUTHENTICATION WORK?

When you have two-factor authentication activated, you need two pieces of information to get into your account:
  1. Something you know — like a password, PIN or pattern
  2. Something you have — like a smartphone, ATM card or FOB
  3. Something you are, such as a bio-metric like a fingerprint or voice print
Why is two-factor so effective?  It’s pretty easy for bad guys to guess weak passwords — especially with all the personal information available today via social media. But hackers will have a heck of a time obtaining that something you have — such as the hardware or software security token or mobile phone you’ve authorized for verification texts. You need to have that mobile phone or token in hand to get the information you need to access your account.

EXPERT TIP - Use one form of two-factor for logging in, and a second, different two-factor combo for recovery.

How to enable two-factor authentication on popular sites.  It may not be the perfect security solution, but two-factor authentication reduces the risks associated with common Web activities.

Here is a list of popular web sites that offer Two-Factor Authentication.  If you use other sites that require a secure login, make sure you ask those sites if they have 2-factor authentication.

Site How to enable 2FA
Amazon Web Services (AWS) http://aws.amazon.com/iam/details/mfa/
Apple iCloud / iTunes https://support.apple.com/kb/HT5570
Basecamp https://basecamp.com/help/guides/you/phone-verification
BitPay https://bitpay.com/two-factor
Bitstamp https://www.bitstamp.net/article/update-bitstamp-adds-support-two-factor-authentica/
Box.net https://support.box.com/hc/en-us/articles/200520628-Admin-Console-2-Step-Login-Verification
Buffer https://bufferapp.com/2step
Cloudflare http://blog.cloudflare.com/2-factor-authentication-now-available
Coinbase http://blog.coinbase.com/post/25677574019/coinbase-now-offers-two-factor-authentication
Dreamhost http://wiki.dreamhost.com/Enabling_Multifactor_Authentication
Dropbox https://www.dropbox.com/help/363/en
eBay https://www.paypal.com/us/cgi-bin/webscr?cmd=_security-key
E-Trade https://us.etrade.com/landing/secureid_enter#
Etsy https://blog.etsy.com/news/2012/safety-and-privacy-first/
Evernote http://blog.evernote.com/blog/2013/10/04/two-step-verification-available-to-all-users/
Facebook https://www.facebook.com/note.php?note_id=10150172618258920
Fidelity Investments https://www.fidelity.com/security/soft-tokens/overview
Github https://help.github.com/articles/about-two-factor-authentication
Gmail https://support.google.com/accounts/answer/185839?hl=en&topic=1056283&ctx=topic
GoDaddy http://support.godaddy.com/help/article/7502/enabling-twostep-authentication?pc_split_value=4
Google Apps https://support.google.com/a/answer/184711?hl=en
Google+ https://support.google.com/accounts/answer/185839?hl=en&topic=1056283&ctx=topic
Hootsuite https://help.hootsuite.com/entries/22527304-Managing-Google-Authenticator
Joomla http://extensions.joomla.org/extensions/access-a-security/site-security/login-protection/24822
LinkedIn http://blog.linkedin.com/2013/05/31/protecting-your-linkedin-account-with-two-step-verification/
Mailchimp https://blog.mailchimp.com/alterego-now-works-with-google-authenticator-and-yubi-key/
Office 365 https://support.office.com
PayPal https://www.paypal.com/us/cgi-bin/webscr?cmd=_security-key
Salesforce.com https://help.salesforce.com/HTViewSolution?id=000005464&language=en_US
Skype http://windows.microsoft.com/en-au/windows/two-step-verification-faq
Slack https://get.slack.help/hc/en-us/articles/204509068-Enabling-two-factor-authentication
Steam https://support.steampowered.com/kb_article.php?ref=4020-ALZM-5519
Tumblr http://www.tumblr.com/docs/en/two_factor_auth
Twitter https://blog.twitter.com/2013/getting-started-with-login-verification
U.S. Social Security https://secure.ssa.gov/RIL/HpsView.do#question3
Vangaurd https://personal.vanguard.com/us/freshness/insights/hub/overview.jsf
Wealthfront https://pages.wealthfront.com/faqs/how-do-i-enable-two-step-authentication-on-my-account/
WordPress.com http://wordpress.org/plugins/google-authenticator/
Yahoo http://email.about.com/od/yahoomailtip1/qt/How-to-Protect-Your-Yahoo-Mail-Account-with-Two-Step-Authentication.htm
YouTube https://support.google.com/accounts/answer/185839?hl=en&topic=1056283&ctx=topic
ZenDesk https://support.zendesk.com/hc/en-us/articles/203824246