Two-factor authentication (2FA)
Two-factor authentication (2FA) is sign-in protection that needs two independent confirmations to access an account, for example an SMS code and a separate password.
What it is
One key is not enough, two are needed. If an attacker learned the password or intercepted the SMS code, they still cannot sign in without the second factor. The second factor is something only the owner knows or has: a separate password, a code from an authenticator app, a physical key.
How it looks in messengers
In Telegram it is the cloud password: after the SMS code the system asks for it as well. In WhatsApp it is a PIN that is requested from time to time and is needed when moving the number to a new device. Both can be turned on in the security settings.
Why it matters
A work number holds clients, history and money. Intercepting an SMS is hard but possible: through a SIM swap, through access to an old phone, by persuading an employee to read out a code. The second factor closes most of these scenarios.
Even more important is who holds the second factor. If only the manager knows the cloud password, after they leave the company cannot sign in to its own account.
The typical mistake
Letting an employee turn on 2FA “however is convenient”. The result: the password is the manager’s birth date, the recovery address is their personal one, and nothing is written down anywhere.
The rule: the second factor of a work account is set and kept by the company, not by the person who works on it. Access to passwords belongs to a limited circle and is changed at every dismissal.
More in Signals
- Instagram CRM: what a sales leader should settle before choosingBefore choosing an Instagram CRM, a sales leader settles four things: who owns the account and access to it, who answers the shared DMs and how, where leads come from and where they get lost, and who keeps the client when the conversation moves from DMs to a messenger or a call. Platform rules, client consent and data storage are worked out separately, with a lawyer.
- Telegram CRM: what a sales leader should check before choosingBefore choosing a Telegram CRM, a sales leader answers five questions for themselves: whose numbers and accounts these are, who owns the conversations, who knows what about a client, what the company gives to a bot and what to people, and what happens to clients when a number gets limited. Legality and data location are worked out separately — against platform rules, your country’s law and with a lawyer.