| CARVIEW |
Select Language
HTTP/2 200
cache-control: max-age=300, public, stale-while-revalidate=30
content-type: text/html; charset=utf-8
etag: W/"fc0f2cf08ed0b608f18c499a9ab811c5"
last-modified: Fri, 19 Sep 2025 18:12:06 GMT
link: ; rel=preload; as=style; nopush
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-request-id: f67bb81d-c96f-4336-8d89-4dae0af93456
x-runtime: 0.056413
x-xss-protection: 0
accept-ranges: bytes
age: 0
date: Wed, 08 Oct 2025 22:01:08 GMT
via: 1.1 varnish
x-served-by: cache-bom-vanm7210050-BOM
x-cache: MISS
x-cache-hits: 0
x-timer: S1759960867.204025,VS0,VE1325
strict-transport-security: max-age=300
content-length: 19397
Two-factor authentication | Surveillance Self-Defense
Skip to main content
Surveillance
Self-Defense
Self-Defense
Two-factor authentication
"Something you know, and something you have." Login systems that require only a username and password 
can be vulnerable to someone else obtaining (or guessing) those pieces of information. Services that offer two-factor authentication also require you to provide a separate confirmation that you are who you say you are. The second factor could be a one-off secret code that is sent to you via email or text, a number generated by a program running on a mobile device, or a separate device, such as a USB authentication token that you carry and that you can use to confirm who you are. Companies like banks, and major internet services like Google, PayPal, and Facebook offer two-factor authentication .