📍 Where you are in the curriculum: Week 7 of 12

Welcome to Unit 3: Defending Yourself! In Unit 2, you saw how attackers use phishing, social engineering, and deepfakes to steal credentials. In Week 3, you learned to create strong passwords. Now let's add a second layer of defense so even if your password gets stolen, your accounts stay safe.

---

What Is Two-Factor Authentication? 🔐

Imagine your house has a front door with a lock. You use a key to get in. But what if someone found a copy of your key? They could just walk right in!

Now imagine your house ALSO had an alarm system with a secret code. Even if someone had your key, they'd still need that code, or the alarm goes off! 🚨

Two-Factor Authentication (2FA) works the same way for your online accounts:

• Factor 1: Your password (something you know)
• Factor 2: A special code sent to your phone or generated by an app (something you have)

Why Does This Matter?

Here's the scary truth: passwords get stolen ALL the time. Hackers have giant lists of leaked passwords. If you use the same password on Roblox and some random website, and that website gets hacked... the hacker can try your password on Roblox too! 😱

But with 2FA turned on, knowing your password isn't enough. The hacker would ALSO need your phone to get the special code. That's way harder for them!

CISA (the government's cybersecurity agency) ↗ says that turning on MFA is one of the single most important things you can do to protect your accounts online.

Think of It Like This:

Without 2FA	With 2FA
One lock on the door	Two locks on the door
Password only	Password + special code
Hacker needs 1 thing	Hacker needs 2 things

💡 Fun Fact: Big gaming companies like Epic Games (Fortnite) will actually give you free in-game items for turning on 2FA! They want you to be safe that badly.