Two-Factor Authentication: 6 Steps for Business Accounts
Could one stolen password hurt your business? An extra sign-in check can help. This short video explains six points, with written steps and practical notes below.
1:47 · No narration: the video shows each step as text on screen, and every step is written out below, with buttons that jump the video to it.
Prefer YouTube? Watch this video on our YouTube channel (opens in a new tab).
The six points in the video
The video is silent. These are its on-screen headings, explanations and labels, followed by supporting notes.
-
Step 1: Start with important accounts
Prioritise email, domain and website administration.
On-screen labels: Business email; Domain account; Website admin.
Email often controls password resets for other services. Domain and website administration accounts also deserve early attention.
-
Step 2: Open the security settings
Find the service’s two-step verification option.
On-screen labels: Official account page; Security section; Sign-in settings.
Use the service’s official account settings or help instructions. Avoid starting from an unexpected message asking you to change sign-in details.
-
Step 3: Choose an offered method
Use the provider’s supported security options.
On-screen labels: Authenticator app; Security key; Other offered options.
Providers offer different methods, such as authenticator apps or security keys. Follow the provider’s instructions for the options available to the account.
-
Step 4: Keep recovery routes safe
Follow the provider’s account recovery instructions.
On-screen labels: Recovery details; Backup options; Secure storage.
Protect recovery codes and backup options as carefully as the account itself. Check that the business can recover access when a device is lost.
-
Step 5: Check a fresh sign-in
Make sure the extra step works as expected.
On-screen labels: Normal sign-in; Second check; Successful access.
Try a fresh sign-in after setup and confirm the second step works. Keep an existing signed-in session until you have confirmed the recovery arrangements.
-
Step 6: Stay alert to requests
Reject unexpected approval prompts and seek help.
On-screen labels: Unexpected prompt; Verify the request; Trusted support.
An unexpected approval prompt may be someone else trying to sign in. Reject it, check the account through its official route and seek trusted support.
A practical check for your business
Start with the email account used to reset other passwords. Set up the provider’s supported extra check and recovery options, then test a fresh sign-in. Keep a business continuity plan for a lost phone or unavailable administrator.
Sources and further detail
Common questions
Should every employee share the same sign-in?
Where supported, give people individual accounts and only the access they need. This makes access changes and recovery easier to manage.
Go further
More video tips
All 205 videos →
How to Test a Website Contact Form: 6 Practical Checks
Follow the whole enquiry.
Website Accessibility: 6 First Checks for Small Businesses
6 useful starting checks.