July 28, 2026
How to turn on 2FA for your social media accounts
Social accounts get targeted for a reason: they're a launchpad. A hijacker can impersonate you, message your friends with scams, or lock you out of years of memories. Two-factor authentication shuts that door.
Why an app beats SMS here too
Every major platform offers 2FA, and most default to text-message codes. Switch to the authenticator app option instead — it's immune to SIM-swap attacks and works even without signal, because the code is generated on your device.
Set it up on the big platforms
- Instagram: Instagram 2FA guide
- Facebook: Facebook 2FA guide
- TikTok: TikTok 2FA guide
- X (Twitter): X 2FA guide
- Reddit: Reddit 2FA guide
- Discord: Discord 2FA guide
A few extra habits
- Turn on login alerts so you're notified of new sign-ins.
- Review connected apps and remove any you don't recognise.
- Never approve a login you didn't start — that prompt means someone has your password.
- Save your backup codes so a lost phone doesn't lock you out of your own profile.
Do it once, for every account
Turning on app-based 2FA takes about a minute per service. Start with the account that's most you online, then work through the rest.