Short answer: phishing-resistant MFA is a second factor you cannot be tricked into handing over — which means FIDO2 security keys and passkeys, and nothing else. Here is why origin binding works, and where authenticator apps still belong.

Short answer: Settings & Privacy → Sign in & security → Two-step verification → Set up, and choose Authenticator app. LinkedIn shows your recovery code exactly once — and its support queue is not somewhere you want to end up without it.

Short answer: look for the “Can’t scan the barcode?” link, then use your app’s Enter a setup key option and choose Time-based. Here is the manual path for every major authenticator — plus the one trick worth doing while the key is still on screen.

Short answer: Apple’s 2FA is built into the OS — Settings → your name → Sign-In & Security → Two-Factor Authentication. You can’t use Google Authenticator with an Apple Account, and you don’t need to. But four settings most people skip decide whether you can ever get back in.

Short answer: Settings and privacy → Security and account access → Security → Two-factor authentication, then tick Authentication app. X removed SMS 2FA for free accounts in 2023 — which means a lot of people have been running with no second factor since without realising.

Short answer: yes — but almost never by breaking the cryptography. Real-time phishing, stolen session cookies, SIM swaps, prompt bombing and support-desk social engineering are how 2FA actually fails, and only some methods close those holes.

Short answer: go to Account & Lists → Login & Security → Two-Step Verification, and choose Authenticator App rather than the SMS default. Here is the current 2026 path, plus the backup-number trap that leaves most Amazon accounts still exposed to SIM swapping.

Short answer: Settings → Security → 2-step verification → Use an authenticator app. PayPal pushes SMS hardest, which is exactly the method you don’t want on an account linked to your bank. Here’s the full setup, plus the phishing scam that 2FA can’t stop.

Short answer: User Settings → My Account → Enable Two-Factor Auth, then scan the QR code and download your backup codes. But Discord’s biggest threat is token stealing, which bypasses 2FA entirely — here’s what actually protects you.