Enable two-factor authentication (2FA) everywhere

Go to your app or site’s Account Settings → Security → 2FA.

Choose Authenticator App (not SMS if possible).

Use Google Authenticator, Authy or Microsoft Authenticator.

Save your backup codes in a secure place.