Glossary
Two-factor authentication
Two-factor authentication (2FA) protects an account with a second proof beyond the password: a code from an app, an SMS or a security key. On AI accounts it matters more than people think, because your chat history is an archive of everything you've ever asked.
A password is one factor: something you know. Two-factor authentication adds a second: something you have (your phone, a security key) or something you are (a fingerprint). A stolen password alone then isn’t enough to get in, and stolen passwords are common, traded in bulk after every data breach.
Why bring this up on an AI site? Because people protect their email and bank but forget the chatbot. Think about what’s behind that one password: a year of chat history: drafts, customer details, health questions, maybe an AI memory profile of you. For a plumber who quotes jobs by chatbot, that account is his customer file. Anyone who logs in reads all of it.
Setting it up takes about two minutes per account. An authenticator app (Google Authenticator, Microsoft Authenticator, or your password manager) is the recommended route; SMS codes are weaker but far better than nothing. ChatGPT, Claude and Gemini all support 2FA, and if you sign in with a Google or Microsoft account, securing that account covers the chatbot too. The setup wizard includes this in your privacy checklist.
Where you’ll meet this
- ChatGPT → Settings → Security → Multi-factor authentication
- Claude → account/security settings, or via your Google sign-in
- Gemini → 2-Step Verification on your Google account (myaccount.google.com)