October is Cybersecurity Awareness Month — here is a password checklist you can finish in an evening.

Learn

How to turn on two-step verification

Every website turns it on in its own settings; an authenticator app only stores the code generator the site hands you. Here is the path for the fourteen services people ask about most, and the three steps inside 8PWD.

Two-step verification, explained

A website shows a QR code once; 8PWD turns it into a 6-digit code that changes every 30 seconds. Even someone with your password can't log in without it. Works offline.

  1. 1

    On the website, open Security › Two-step verification and choose “Authenticator app” (not SMS).

  2. 2

    Tap “Scan” here and point the camera at the QR code.

  3. 3

    Type the 6-digit code back into the website once to confirm.

Service by service

Every website turns it on in its own settings — 8PWD only stores the resulting code generator. Pick a service for the path and the steps. On the website choose “Authenticator app”, not SMS.

  • Google

    Security › 2-Step Verification › Authenticator

    Google may first ask you to set up a phone prompt; after that the “Authenticator” option appears on the same page. Any authenticator app works, not only Google’s.

    Signed in with a company or school Google Workspace account? Your administrator may enforce or limit 2‑Step Verification. If the option is missing, ask them.

    Open Google security settings ↗

  • Microsoft Personal account · Outlook.com, Xbox, Skype, OneDrive

    Security › Advanced security options › Add a new way to sign in › Use an app

    Microsoft suggests its own Authenticator; choose “I want to use a different authenticator app” to get the QR code for 8PWD.

    Open Microsoft security settings ↗

  • Microsoft 365 Work or school account · Microsoft 365, Teams, Entra ID

    My Sign-Ins › Security info › Add sign-in method › Authenticator app › “I want to use a different authenticator app”

    Work or school accounts are managed by your organisation: the steps happen at mysignins.microsoft.com, not in personal account settings. Some organisations only allow Microsoft Authenticator — if the “different authenticator app” choice is missing, ask your IT administrator.

    Open Microsoft 365 security settings ↗

  • Amazon

    Login & security › 2-step verification › Authenticator App

    Amazon also makes you add a phone number as backup. The authenticator app can still be your primary method.

    Open Amazon security settings ↗

  • Facebook

    Accounts Center › Password and security › Two-factor authentication › Authentication app

    Facebook and Instagram share the same Accounts Center — pick the right profile at the top before you start.

    Open Facebook security settings ↗

  • Instagram

    Accounts Center › Password and security › Two-factor authentication › Authentication app

    In the Instagram app: Settings › Accounts Center › Password and security. The QR code is easier to scan from a computer screen; on the phone, use “Copy key” and enter it by hand.

    Open Instagram security settings ↗

  • X (Twitter)

    Settings › Security and account access › Security › Two-factor authentication › Authentication app

    Open X (Twitter) security settings ↗

  • GitHub

    Settings › Password and authentication › Two-factor authentication › Authenticator app

    On GitHub Enterprise Cloud with SSO, your organisation may require 2FA and manage it centrally. The steps are the same under Settings › Password and authentication.

    Open GitHub security settings ↗

  • Discord

    User Settings › My Account › Enable Authenticator App

    Discord has no separate web settings page: open Discord (app or web), click the gear next to your name, then “My Account”.

    Open Discord security settings ↗

  • PayPal

    Settings › Security › 2-step verification › Authenticator app

    Open PayPal security settings ↗

  • Dropbox

    Settings › Security › Two-step verification › Use a mobile app

    Open Dropbox security settings ↗

  • LinkedIn

    Settings › Sign in & security › Two-step verification › Authenticator app

    Open LinkedIn security settings ↗

  • Reddit

    Settings › Account › Two-factor authentication

    Open Reddit security settings ↗

  • Apple Account

    Your Apple Account is protected by Apple’s built-in two-factor authentication: codes appear on your trusted Apple devices or arrive by SMS. Apple does not offer an authenticator-app option, so there is nothing to add to 8PWD — and that is fine. You can check that it is on and manage trusted devices at account.apple.com.

    Uses Apple’s own system — can’t be added to an authenticator app

    Open Apple Account security settings ↗

In the app: Me › 2FA › How do I turn on two-factor?

The text on this page is the text 8PWD 3.1 shows on screen, in this language; it is generated from the app's own strings so the two cannot drift apart.

Download on the App Store

Free for ten passwords, every feature included. One purchase for iPhone, iPad and Mac.

Download on the App StoreDownload on the Mac App Store

Read next