Le texte complet de cette page n'a pas encore été traduit, il est donc affiché en anglais ci-dessous. Le résumé, les libellés et les informations de sécurité ci-dessus sont traduits.
A 16-year-old in Fresno switches phones and tries to log in to her email. The app sends a code to a phone number she no longer has. The recovery email is one her mom made when she was 11, and nobody remembers the password. This is one of the most common ways teenagers lose accounts, and most of it can be prevented in ten minutes.
What two-factor authentication is
Two-factor authentication (a login that needs your password plus one more proof) is also called two-step verification. The Federal Trade Commission (the federal consumer protection agency) sorts login proofs into three groups: something you know, like a password; something you have, like a code or a security key; and something you are, like your face or fingerprint. Two-factor login asks for two of the three.
The FTC ranks the options. A code by text message is better than nothing, but a thief can steal your number through a 'SIM swap' (tricking a phone company into moving your number to their phone). An authenticator app is safer. A physical security key is the strongest.
Why your email account matters most
The FTC points out that password reset links go to your email. Whoever controls your inbox can reset almost every other account you have. Protect that one first.
The law treats what is on your phone as serious too. In Riley v. California (2014), the U.S. Supreme Court held that police generally need a warrant (a judge's written permission) to search the data on a cell phone, even after an arrest, because phones hold so much of a person's private life. The same reason makes your accounts worth locking well.
Set it up now, and what to do if you are locked out
Open your email and main social apps tonight and check the recovery phone number and recovery email. The FTC says to make sure they are ones you entered and can still reach. If a parent's number is listed, that is fine, as long as you both know it is there. Save the backup codes the app offers and keep them on paper somewhere safe.
If you are already locked out, use only the provider's official recovery page. The FTC links to them for Google, Instagram, Snapchat, TikTok, and others. Never give a login code to someone who contacts you first, even if they say they are from the app or are a friend. No real company needs it.
Once you are back in, the FTC's steps are: change the password, sign out of all devices, turn on two-factor login, check for email forwarding rules you did not set up, and warn your contacts not to click links sent from your account while it was taken.
À retenir
- Two-factor login asks for your password plus a second proof; an authenticator app or security key is safer than a text code.
- Your email controls password resets for everything else, so protect it first.
- Check that your recovery phone and email are ones you can still reach, and save backup codes on paper.
- Never share a login code with someone who contacts you first, and use only the app's official recovery page.
Sources
Cet article donne des informations éducatives générales, pas un conseil juridique personnalisé. KidsKnowRights n'est pas un cabinet d'avocats, et lire cet article ne crée pas de relation avocat-client. Les lois varient selon l'État, l'âge et les circonstances, et elles changent avec le temps. Pour un conseil sur une situation réelle, adresse-toi à un avocat agréé ou à un organisme d'aide juridique.