Two-step verification: the simplest protection for your account
Most stolen accounts have something in common: they were only protected by a password. Two-step verification adds a second barrier that an attacker can almost never get past, and it takes a couple of minutes to turn on.
What it is
Two-step verification (2FA) asks for two things to log in: something you know, your password, and something you have, usually your phone. Even if someone gets your password, they can't get in without your phone.
Which method to choose
- Authenticator app. Apps like Google Authenticator, Microsoft Authenticator or Aegis generate a new code every 30 seconds. It is the recommended option for most people.
- Security key. A small USB or NFC device. It is the most secure method, because it can't be fooled by a fake website.
- SMS. Better than nothing, but it is the weakest method: messages can be intercepted or redirected with a duplicate of your SIM card.
How to turn it on in Discord
- Open your user settings and go to My Account.
- In the password and authentication section, choose to enable authentication.
- Scan the QR code with your authenticator app and enter the code it shows you.
- Keep the backup codes somewhere safe. You'll need them if you lose your phone.
If you run a server
Discord lets you require two-step verification for all moderators before they can ban, kick or delete messages. Turn it on in your server's safety settings: if a moderator's account is stolen, the attacker won't be able to use their permissions without the second step.
Remember: no one from the Discord or FireFighter team will ever ask for your verification codes. If someone does, it's a scam.
FireFighter Bot Security and administration bot for Discord. Invite it to your server for free.