Two-Factor Authentication (2FA)

Two-factor authentication, or 2FA for short, adds an extra layer of security to your online accounts.

Instead of relying solely on a username and password, you use an additional device to generate a unique code that is valid for a short time.

This way, even if someone has your username and password, they still cannot log in without your physical device.

How to set-up 2FA in Make.com

Setting up two-factor authentication is essential for Make.com, as you connect it to many tools.

If someone gains access to your Make.com account, all hell could break loose:

  • Got your email inbox connected? They can now read all your emails, and send emails pretending to be you.
  • Google Drive connected? They can access all your files.
  • Stripe connected? They can mess with your bookkeeping and issue refunds without your knowledge.
  • Membership site connected? They can create new accounts.
  • Calendar connected? They can wipe all data.
  • Facebook connected? They can add posts to your profile.

Better don’t wait, it only takes a few minutes.

Go to your profile, visit the 2FA tab, and follow the instructions πŸ˜„

two factor authentication enabled make account secure
Two-factor authentication enabled in Make.com

The setup depends a bit on the device you’re using;

The YubiKey is a bit safer since it can’t get compromised like a smartphone can, but I wouldn’t stress about it unless you have state-level secrets.

Both are solid options, so choose whichever you prefer πŸ’ͺ

Setup two-factor authentication everywhere

Many applications and websites support two-factor authentication these days.

Wherever possible, enable it to keep the bad guys out πŸ₯·

Even the strongest password might not be enough, as data leaks can happen, and you don’t want to become a victim of such attacks.

As online business owners, it is especially important to keep our revenue and customers’ data safe.

Back-up codes

Whenever you set up two-factor authentication with an application or website, it will generate backup codes in case you lose your device.

I suggest storing these codes somewhere offline, such as printing them out or keeping them on an old USB stick or SD card.

Also set a remember once a year to check if you didn’t throw the back-up codes out by accident.

It can be very frustrating to regain access to your accounts if you lose your two-factor authentication device and don’t have any backup codes.