Toàn bộ nội dung trang này chưa được dịch, nên được hiển thị bằng tiếng Anh bên dưới. Phần tóm tắt, các nhãn, và thông tin an toàn ở trên đã được dịch.
A 16-year-old in Fresno switches phones and tries to log in to her email. The app sends a code to a phone number she no longer has. The recovery email is one her mom made when she was 11, and nobody remembers the password. This is one of the most common ways teenagers lose accounts, and most of it can be prevented in ten minutes.
What two-factor authentication is
Two-factor authentication (a login that needs your password plus one more proof) is also called two-step verification. The Federal Trade Commission (the federal consumer protection agency) sorts login proofs into three groups: something you know, like a password; something you have, like a code or a security key; and something you are, like your face or fingerprint. Two-factor login asks for two of the three.
The FTC ranks the options. A code by text message is better than nothing, but a thief can steal your number through a 'SIM swap' (tricking a phone company into moving your number to their phone). An authenticator app is safer. A physical security key is the strongest.
Why your email account matters most
The FTC points out that password reset links go to your email. Whoever controls your inbox can reset almost every other account you have. Protect that one first.
The law treats what is on your phone as serious too. In Riley v. California (2014), the U.S. Supreme Court held that police generally need a warrant (a judge's written permission) to search the data on a cell phone, even after an arrest, because phones hold so much of a person's private life. The same reason makes your accounts worth locking well.
Set it up now, and what to do if you are locked out
Open your email and main social apps tonight and check the recovery phone number and recovery email. The FTC says to make sure they are ones you entered and can still reach. If a parent's number is listed, that is fine, as long as you both know it is there. Save the backup codes the app offers and keep them on paper somewhere safe.
If you are already locked out, use only the provider's official recovery page. The FTC links to them for Google, Instagram, Snapchat, TikTok, and others. Never give a login code to someone who contacts you first, even if they say they are from the app or are a friend. No real company needs it.
Once you are back in, the FTC's steps are: change the password, sign out of all devices, turn on two-factor login, check for email forwarding rules you did not set up, and warn your contacts not to click links sent from your account while it was taken.
Hãy nhớ điều này
- Two-factor login asks for your password plus a second proof; an authenticator app or security key is safer than a text code.
- Your email controls password resets for everything else, so protect it first.
- Check that your recovery phone and email are ones you can still reach, and save backup codes on paper.
- Never share a login code with someone who contacts you first, and use only the app's official recovery page.
Nguồn
Bài viết này cung cấp thông tin giáo dục chung, không phải tư vấn pháp lý cho từng cá nhân. KidsKnowRights không phải là công ty luật, và việc đọc bài viết này không tạo ra quan hệ luật sư - thân chủ. Luật pháp khác nhau tùy theo tiểu bang, độ tuổi, và hoàn cảnh, và thay đổi theo thời gian. Để được tư vấn về một tình huống có thật, hãy nói chuyện với một luật sư có giấy phép hành nghề hoặc một tổ chức trợ giúp pháp lý.