
Experts point out that the best way to activate this feature is to use applications that generate verification codes, such as Google Authenticator, Microsoft Authenticator, or Authy, instead of relying on text messages (SMS), as the applications remain safer and less vulnerable to fraudulent operations related to SIM Swap.
Also, specialists advise saving the recovery codes provided by the services when activating the feature, and keeping them in a safe place, because they allow the account to be restored in the event that the phone is lost or the verification application crashes.
Experts also stress that users should not agree to any login request or enter any verification code if they are not the one who tried to log in, because the arrival of an unexpected verification code may be an indication that someone else has obtained the password and is trying to hack the account.
In parallel, major technology companies have begun to expand the adoption of passkeys, a modern technology that relies on fingerprint or facial recognition instead of passwords, and provides a higher level of protection against phishing attacks, and is expected to become the most widespread security option in the coming years.