ENKR

Use an authenticator app or passkey instead of SMS codes

SMS codes go to whoever controls your phone number, so someone who takes over the number receives them too. An authenticator app or a passkey is tied to your device or account, not to your phone number, so the second step cannot be redirected that way. Free.

Cost
free
Time
about 20 min
Where
Anywhere
Mark it done in my breach check

How to do it

  1. Open the security settings of your email account first, then of banking and other important accounts.
  2. Add an authenticator app or a passkey as your sign-in method.
  3. Where the service allows it, remove SMS codes as the second step.
  4. Save the backup codes the service gives you and keep them offline.

What it does

Logging in to your other accounts with the leaked password
makes it harder
Someone intercepting your SMS verification codes
makes it harder