The BSI recommends turning on two-factor authentication wherever an online service offers it.

With a second factor, for example a code from an authenticator app, a security key or your fingerprint, your account stays protected even if your password falls into the wrong hands. This is especially worthwhile for email, online banking, online shopping and social media. Many services offer this feature but leave it switched off by default, so it is worth taking a look at the security settings. If possible, register an additional second factor as a backup so that you are not locked out if, for example, you lose your phone.

Passkeys go one step further and let you sign in without a password at all. According to the BSI, you can safely use them whenever a trusted service offers them.

All information on this topic can be found in this article on the website of the Federal Office for Information Security.

back to overview