You should be using two-factor authentication to log onto websites, so that even if someone has your password from a data breach, they won’t be able to get in.
It’s more secure than many existing 2FA options (such as using SMS) because your phone will check in with your computer via Bluetooth to make sure you’re on the correct website and not being phished.
(Interestingly, Google doesn’t let you set this up via a mobile device, so you can’t use one phone to set up another phone as a key.) Before you start,
Here’s how to set it up:
Then, on your computer, open a Google Chrome browser.
If you don’t have two-step verification set up yet, enter this site, and follow these instructions. The TL;DR is that you’ll need to log in, enter a phone number, and select what secondary methods of verification you’d like, which brings us back to…
method of verification. Just make sure your phone is in close proximity to your computer whenever you’re trying to log in.
Tap on the prompt to verify your login and you’re all set!
Here are some screenshots of what it looks like when you’re prompted on your phone to verify a login. It’s similar to what Google Prompt looks like already, with the main difference being that your phone will be checking with the website to verify it’s the right one.