Two-factor authentication (2FA)

2FA adds a second factor on top of a password — typically a time-based code from an app like Authy or Google Authenticator, or a hardware security key. Every exchange account should have 2FA enabled. SMS 2FA is better than nothing but vulnerable to SIM-swap attacks.