Lock it down
Best authenticator app: choose one and back up your codes
Move off SMS onto an authenticator app or a hardware key, then store your backup codes so a lost phone never locks you out of your own accounts.
Compare authenticator appsOfficial tools only
Every setup uses Instagram, TikTok, X, and LinkedIn's own 2FA screens.
No codes, ever
We never ask for a password or one-time code — no form here takes them.
Your accounts only
Guidance is for accounts you own, or a family member who sets up their own.
Authenticator app names and features are described from each maker's public documentation.
Why an app or key beats SMS — and what to look for
Drop SMS codes
Texted codes can be redirected by a SIM-swap; an app's codes can't be.
App or key
Codes are generated offline on your device, refreshing every 30 seconds.
Encrypted backup
Choose an app with backup so a new phone restores your codes in minutes.
Backup codes
One-time codes let you back in when your phone is lost, dead, or replaced.
You set every one of these up yourself inside the app and the platform's own 2FA screen.
Authenticator apps and keys compared
| Provider | Encrypted backup | No phone number required | Open source (auditable) | Phishing-resistant |
|---|---|---|---|---|
| Authy | YesEncrypted cloud backup built in. | NoSetup requires a phone number. | NoClosed source. | NoTOTP codes can be phished. |
| Google Authenticator | If eligibleOnly if you enable Google account sync. | YesWorks standalone; sync is optional. | NoClosed source. | NoTOTP codes can be phished. |
| Microsoft Authenticator | YesCloud backup to your Microsoft account. | If eligibleTOTP works alone; backup needs an account. | NoClosed source. | NoTOTP part is still phishable. |
| Aegis (Android) | YesEncrypted export you save yourself. | YesNo account or number needed. | YesOpen source and auditable. | NoTOTP codes can be phished. |
| Hardware key (YubiKey / passkey) | NoNot backed up — register a spare key instead. | YesA physical device, no number needed. | If eligibleOpen FIDO2 standard; firmware varies by maker. | YesBound to the real site, so fake logins fail. |
What we guarantee
We only guide official app and platform 2FA setup
On accounts you own — never someone else's.
We never ask for or handle your codes or passwords
Codes stay on your device; no field here collects them.
Every step uses the app's or platform's own settings
We link to official docs, not workarounds or bypasses.
We can't recover an authenticator you never backed up, and no method makes an account unhackable — this cuts your risk, it doesn't erase it.
FAQ
Which authenticator app should I choose?
Any reputable TOTP app works, but pick one with an encrypted backup — Authy, Microsoft Authenticator, or Aegis on Android — so a lost phone doesn't lock you out of every account at once.
Is an authenticator app really safer than SMS text codes?
Yes, because an app generates codes on your device offline, so an attacker who hijacks your phone number through a SIM swap can't intercept them the way they can with SMS.
What happens to my accounts if I lose the phone with my authenticator?
You sign back in with the backup codes each platform gave you when you turned on 2FA, or you restore your app's encrypted backup on a new phone, which is exactly why saving both matters.
Where should I store my backup codes?
Keep them in your password manager or printed and locked away offline, never in a plain notes app, a screenshot, or an email, and never share them with anyone, including us.
Do I need a hardware key like a YubiKey?
A hardware key is the most phishing-resistant option and worth it for your highest-value accounts, but a backed-up authenticator app already protects you far better than SMS for everyday use.