Two-Factor Authentication

Two-factor authentication, usually shortened to 2FA, requires a second proof of identity in addition to a password when signing in. The second factor is typically a code from an authenticator app, a hardware key, or a code sent by SMS. Its value is simple: a password that has been guessed, reused or leaked from an unrelated website is no longer enough on its own. Because gambling accounts hold a balance, stored payment methods and verified identity documents, they are worth more to an attacker than most logins, and operator terms generally make the account holder responsible for activity carried out with their credentials. Not all second factors are equally strong. An authenticator app or a hardware key is harder to intercept than an SMS code, because a phone number can be taken over at the mobile operator. Where an operator offers 2FA it is normally found in account settings under security, and switching it on is the single change with the largest effect on account safety.