🛡️ Worksheet: Two-step verification (2FA)

1. Mark ✅ or ❌

1. Move your authenticator app across when you change phones.
2. Choose an authenticator app or a passkey over SMS.
3. Don't keep your backup codes as photos in your gallery.
4. Don't tell anyone your verification code – not your friends, not “staff”.
5. Keep your backup codes on paper somewhere safe at home.
6. Don't turn off 2FA just because it seems like a hassle.
7. Turn on 2FA for your email, social media, games and phone account.
8. Don't tap “Yes, it's me” if you're not the one logging in.

2. Choose the correct answer

1. Which 2FA method protects you best from fake phishing websites?

   • A) An SMS code
   • B) An email code
   • C) A security key or passkey
   • D) A secret question

2. A friend writes: “Send me the code you got by mistake.” What do you do?

   • A) I send it – they're my friend
   • B) I don't send it, and I contact my friend another way
   • C) I send it after 5 minutes
   • D) I post it on my story

3. What are backup codes for?

   • A) Buying things in a game
   • B) Logging in to your account if you lose your phone
   • C) Giving to your friends
   • D) Changing your username

3. Think and write

1. Explain in your own words: what is two-step verification (2FA)?

2. Write one example of each: something you know, something you have, something you are.

3. You get an SMS with a code you didn't ask for. What does this mean, and what do you do?

4. A friend messages you: “Send me the code you got by mistake.” Write your reply.

5. List three accounts you would protect with 2FA first, and explain why.

6. Where would you keep your backup codes, and why not on your phone?

cyber.kren-ks.eu · Make cyber hygiene a habit