What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Turn on multifactor authentication in your bank’s security settings, choosing an authenticator app or security key if the bank supports one. Then use a long, unique password, secure the email account used for password resets, and never give a verification code to someone who contacts you unexpectedly. The exact options and setup steps vary by bank.
Choose the strongest second factor your bank supports
Multifactor authentication (MFA), also called two-factor or two-step authentication, adds a verification step beyond your password. The Federal Trade Commission (FTC) recommends enabling it on sensitive accounts such as banking accounts. It may not be enabled by default. Available methods depend on your bank.
As an Amazon Associate I earn from qualifying purchases.
| Method | What to know | Availability and trade-offs |
|---|---|---|
| Security key | A physical device that may connect through USB or NFC. | The FTC describes security keys as the strongest of the common methods discussed in its guidance. Your bank must support the key, and it must work with your device. |
| Authenticator app | Generates verification codes in an app on your device. | It avoids the specific SIM-swapping weakness of SMS codes. Whether your bank offers it varies. |
| Text message (SMS) | Sends a code to your phone number. | Convenient, but a criminal may intercept messages through SIM swapping. If this is the only second-factor option your bank offers, enabling it is better than using no second factor. |
| Email code | Sends a code to an email account. | Its security depends in part on how well that email account is protected. Use MFA on the inbox too, if available. |
The FTC characterizes text and email codes as the least secure of these common MFA options. These comparisons describe general risks, not a guarantee that a particular bank offers or supports a method.
Recommended Free Tools
Check security-key compatibility before choosing one
First confirm in your bank’s official help materials that it accepts security keys. Then check that the key’s connection type, such as USB or NFC, works with your phone or computer. The FTC discusses these connection types but does not verify compatibility for a particular bank, device, or key model. A FIDO security key may be an option where supported; do not assume a specific key will work without checking.
#1 Best Overall
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
Turn on MFA through a trusted route
- Open the bank’s official app or type a website address you already know. Do not use a link from an unexpected message.
- Sign in and open the account’s security settings. Look for “two-factor authentication,” “two-step verification,” or “multifactor authentication.” The labels and enrollment process vary by institution.
- Choose a security key or authenticator app if your bank offers one and your devices are compatible. Otherwise, enable the best available method, including SMS or email if that is all the bank provides.
- Follow the bank’s own instructions to finish setup and confirm that the second factor works. Save any recovery information only as the bank directs, and keep it private.
- When asked whether to remember a device, do so only on a personal device you control—not on a public or shared computer.
For bank-specific steps, use the institution’s official help pages or contact it through a trusted phone number or its app.
Strengthen your password and recovery email
Use a long, unique password
Use a different password for online banking than for every other account. The FTC recommends aiming for at least 12 characters and warns against reusing passwords. A browser’s built-in password generator or a password manager can create and save a strong password; buying a separate tool is not required if a built-in option meets your needs.
Rank #2
- Ultra-Compact FIDO2 Security Key - Plug-and-stay or carry on a keychain. This USB-A hardware security key offers portable, always-on protection for desktop and mobile use. (Item Size: 0.75 X 0.74 IN x 0.25 IN)
- USB-A Hardware Key for All Devices - Works with USB-A ports on PC, Mac, Android, and other laptop/notebook device. Enables secure, cross-platform login with FIDO2.0 passkey support.
- FIDO Certified Security Key - Meets FIDO and FIDO2 standards. Works with Google, Microsoft, GitHub, Dropbox, and more. Please check service compatibility before purchase.
- Passwordless Login with Passkey - Supports passkey login via WebAuthn and CTAP2. Enjoy password-free sign-ins where supported. Not all websites or services currently support passkeys.
- Advanced Multi-Factor Authentication - Offers 200 FIDO2 passkey slots and 50 OATH-TOTP slots. Strong, flexible 2FA/MFA support across various apps and authentication platforms.
Change a bank password if you have reused it elsewhere or believe it has been exposed. Avoid predictable variations of an old password.
Secure the inbox that can reset your password
Password-reset links often arrive by email. If someone takes control of that inbox, they may be able to reset passwords for other accounts, including banking. Use a unique email password and enable MFA on the email account if the provider offers it.
Rank #3
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Universal Connectivity (USB-C, USB-A, & NFC): Designed for PCs, Macs, iPhones, and Android. For mobile use, simply unfold the key, align it with your phone’s NFC antenna, and hold for a few seconds to authenticate.
- Enhanced MFA (FIDO2 & TOTP/HOTP): Strengthen your security with flexible options. Use the Manager App to access TOTP/HOTP features for accounts that do not yet support FIDO2.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID. NFC is supported only through mobile authentication, Not MacOS/windows.
Keep verification codes private and handle suspicious contact safely
A verification code is a credential that can help someone prove they are the account holder. The FTC’s instruction is direct: never give your verification code to someone else. Do not share it with an unexpected caller, texter, or email sender—even if they claim to be from the bank’s fraud team or say your account has suspicious activity.
Scammers may ask for a code or tell you to move money to “protect” it. Stop the conversation. Do not click the message’s links or call its phone number. Contact the bank using the number on a statement, the official app, or a website address you know is genuine. The FTC describes these tactics in its guidance on avoiding scams and recognizing phishing.
Rank #4
- USB-C or tap via NFC for easy authentication on any compatible device. No drivers needed; optional Kensington software available for advanced management features.
- Works across Windows, macOS, iOS, Android, ChromeOS, and supports Passkeys and Apple ID.
- Slim, keychain-ready form for easy carry and on-the-go authentication
- IP68-rated for dependable performance
- FIDO CTAP 2.1 for enhanced security features (e.g. resident credentials, Passkey support) and backwards compatibility with CTAP 2. FIDO2 L2 certified security for phishing resistant protection against identity theft and unauthorized access.
If you already shared a code or account details
Contact the bank immediately through its official app or a trusted number, explain what you shared, and follow its instructions. You can also report the fraud to the FTC. Do not assume a particular account outcome or reimbursement; the bank will assess the situation.
Maintain the devices you use for banking
- Install operating-system and app updates on your phone and computer.
- Use MFA on personal devices only; never mark a public computer as trusted.
- Reach the bank independently when a message asks you to sign in or verify information. Unexpected messages can imitate a bank, so avoid their links and use a known-real site, the official app, or a trusted number instead.
This is general U.S. consumer guidance from the FTC, accessed October 7, 2026. Bank features, supported methods, recovery steps, and device compatibility vary and may change; follow your own institution’s current instructions.
Quick Recap
Best Value
- Ultra-Compact FIDO2 Security Key – Plug-and-stay or carry on a keychain. This USB-C hardware security key offers portable, always-on protection for desktop and mobile use.(Item Size: 0.73 X 0.60 X 0.30 inches)
- USB-C Hardware Key for All Devices – Works with USB-C ports on PC, Mac, Android, and USB-C iPhones. Enables secure, cross-platform login with FIDO2.0 passkey support.
- FIDO Certified Security Key – Meets FIDO and FIDO2 standards. Works with Google, Microsoft, GitHub, Dropbox, and more. Please check service compatibility before purchase.
- Passwordless Login with Passkey – Supports passkey login via WebAuthn and CTAP2. Enjoy password-free sign-ins where supported. Not all websites or services currently support passkeys.
- Advanced Multi-Factor Authentication – Offers 200 FIDO2 passkey slots and 50 OATH-TOTP slots. Strong, flexible 2FA/MFA support across various apps and authentication platforms.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
