Hello! I'm Shemihaza, the Sentinel. Today, I have a very important topic to discuss to keep your digital life safe. Your daily SNS, email, and game accounts contain a lot of personal information, don't they? If someone were to use them without your permission... just thinking about it is scary, right?
To protect you from such dangers, there's a system like the strongest shield: 'Two-Factor Authentication.' It might sound complicated, but it's actually very simple! Let's explore how it works and how to set it up with Shemihaza.
Why is 'Two-Factor Authentication' necessary? Reasons why passwords alone are dangerous
Do you think, 'I've set a password, so I'm safe!'? Unfortunately, in this day and age, a password alone is not enough. Cyber attack methods are becoming increasingly sophisticated, and the risk of passwords being stolen is growing. I'll tell you three main reasons why passwords alone are dangerous.
- ▸① **Risk of password theft**: There are many malicious individuals on the internet trying to steal your password. They might trick you into entering your password on fake websites (phishing scams), or try to guess it from previously leaked information... their methods evolve daily.
- ▸② **Password reuse**: Are you reusing the same password across multiple services? If your password is leaked from just one service, there's a risk that all your other accounts could be hijacked in a domino effect.
- ▸③ **Weak, easy-to-remember passwords**: Passwords that are easy to remember, such as birthdays, phone numbers, or simple words, are like 'easy keys to pick' for malicious actors. This increases the risk of your password being guessed.
For these reasons, a password alone is like a 'house with only one key.' If a thief gets hold of that key, they can easily enter as they please. That's where 'Two-Factor Authentication' comes in, adding another key.
How does 'Two-Factor Authentication' work?
Two-Factor Authentication is a system that, when you log in, verifies 'you yourself' using another method in addition to the first key, your 'password.' For example, the following methods are common:
- ▸**'One-Time Passwords' sent to your smartphone**: When you try to log in, a short numerical code that can only be used at that moment is sent to your registered smartphone's SMS (short message service). You verify your identity by entering this code.
- ▸**Authentication with a dedicated app**: Using a dedicated app like Google Authenticator, a new numerical code is automatically generated at regular intervals. You log in by entering this code.
- ▸**Biometric authentication (fingerprint or face)**: You verify your identity using your smartphone's fingerprint or facial recognition.
By setting up two-factor authentication in this way, even if a malicious person knows your password, they won't be able to log in without your smartphone or fingerprint, significantly reducing the risk of your account being hijacked.
Checkpoints to protect yourself
- ✓Check if two-factor authentication is set up for all services where it's available, such as SNS, email, and online banking.
- ✓Check if you are using unique, complex passwords (a mix of uppercase, lowercase, numbers, and symbols, at least 10 characters long) for each service.
- ✓Do not easily click on URLs found in suspicious emails or messages.
- ✓Do not easily download unknown apps or software.
Where to get help if you're in trouble
If you encounter any problems, such as your account possibly being hijacked or receiving suspicious charges, don't try to handle it alone; seek advice immediately. The Consumer Hotline (188) and the Police Consultation Dial (#9110) can help you. If you suspect fraudulent credit card use, call your card company immediately. In the case of account hijacking, first contact the service provider and request actions such as account suspension.