Phishing, public Wi-Fi, passwords and two-factor login.
3 articles
Text codes, authenticator apps and security keys all count as two-factor. They protect against very different attacks, and the weakest one is still far better than none.
The convincing ones don't break any rules a filter checks for. They come from real accounts, link to real services and ask for something ordinary — which is why the checks that work are ones you do yourself.
Most sites are encrypted, so the old warnings are partly out of date. The real exposure on café and hotel networks is narrower, and a few habits cover nearly all of it.