Two Locks — Defense Range

One lock is not enough

A thief got your password. Maybe from a fake message, a trick called . Watch them log in with just the password. Press Log in for the thief.

your-account.example

The thief

Username

Password (stolen)

Waiting.

your account

🔒

Locked. One lock stands between the thief and your stuff.

Turn on the second lock

Two-factor means two different kinds of proof: something you know, and something you have. The thief stole the thing you know. They cannot steal the thing you keep.

Something you knowYour password. A secret in your head. This is the one the thief copied.

Something you haveA code on your phone, or a passkey only your device can use. The thief is not holding it.

Pick your second lock, then flip it on.

Two-factor is OFF. Flip it on.

Same thief. Same password. Stopped.

The thief still has your password. They type it again. This time a second lock is waiting, and the proof it needs is on your phone, not theirs.

your-account.example

The thief, again

Username

Password (still stolen)

Second lock: one-time code

Waiting.

your phone · in your pocket

🔐 Authenticatornow

Your phone is quiet. No real login yet.

Now you log in

It is really you this time. You know the password, and you are holding the second lock. Approve your own login and walk right in.

your-account.example

You

🔒

Password accepted. Waiting for your second lock.

your phone · in your hand

🔐 Approve sign-innow

Is this you?

A login is waiting on your account. Approve it only if it is you.