Short answer: Settings → My account → two-step verification, with a passkey if offered. But spend more time on sharing settings than on the login — with Notion, documents usually leak through a public link, not a stolen password.

Short answer: backup codes are single-use substitutes for your 2FA code; a recovery key is usually one permanent string that can replace support recovery entirely. Services name them inconsistently — so ask what it does, not what it’s called.

Short answer: secure two logins, not one — your hosting billing account and cPanel itself. Then close SSH, FTP and API access, which bypass the panel entirely. And note that cPanel 2FA has no backup codes.

Short answer: because SMS reaches every customer with no app and no instructions, and because banks carry the fraud losses and price them. It’s a defensible commercial calculation — and it’s also why your bank is probably your weakest link.

Short answer: Security credentials → Assign MFA device, and register two hardware keys rather than one. Then stop using root entirely — the real protection is that the all-powerful credential sits unused in a safe.

Short answer: Google’s strictest setting — security keys required, third-party app access blocked, recovery deliberately harder. Free, ten minutes, and genuinely worth it if someone would plausibly target you specifically. For most people it’s more friction than they need.

Short answer: Admin console → Security → Authentication → 2-Step Verification. Allow, communicate, then enforce with a grace period — and set “Only security key” for admins. Protect the admin accounts before you enforce anything.

Short answer: account takeover is when someone gains control of your account and uses it as you. It follows a five-stage pattern — and knowing the stages tells you exactly where one setting would have stopped it.

Short answer: attach the Battle.net Authenticator in the mobile app, or use a standard TOTP app at account.battle.net → Security. Save your restore code, treat SMS Protect as a safety net — and keep cheats off the machine, because they walk straight past all of it.