A practical example
A fake support agent may ask for the code that just arrived on your phone. That code is meant for your sign-in—not for the caller.
Three useful actions
- 01
Start with email, financial, social media, and administrator accounts.
- 02
Use the strongest method the service and your circumstances support.
- 03
Store recovery codes privately and never share a sign-in or recovery code with another person.