Is a password enough?

Not even close. Add a second factor. Any one beats a password alone.

The Just Right card

Too littleOne password, used everywhere
Too muchLocked down tight with no backup codes
Just rightPassword manager, MFA everywhere, passkeys where you can

Huh, didn't know that: Text code: good. Email code: good. Authenticator app: better. Passkey: best.

The dad joke
Somebody tried to SIM swap my number. Joke's on them. All they got were calls about my car's extended warranty.
Play the game

Sources

  1. Microsoft on MFA (2019)
  2. CISA mobile guidance (2024)
  3. Have I Been Pwned (2025)

Test yourself on this one