Two-factor authentication methods by service

Methodology

How a service enters this directory

This directory covers 141 verified services across 9 categories. We add a method only when the provider's own sign-in, security, recovery, or help documentation supports it. The current review includes 597 official sources; 99 services have every required 2FA field documented.

We do not infer support from screenshots, search snippets, reputation, or another comparison. When official evidence is insufficient, the row stays visible as “Not yet documented.” That state does not mean the provider lacks 2FA. Method labels describe the service record checked on its displayed date, not universal availability across every plan, region, tenant policy, device, or account type.

Choosing a method

Prefer phishing-resistant options when they are offered

Security keys and passkeys can resist fake sign-in pages because they are bound to the real service. An authenticator app is usually stronger than a text message, while SMS can still be useful when it is the only second factor available. Any second factor is most effective when recovery settings are also secure.

Compare 2FA methods in depth →

Why we keep unknown results visible

Authentication settings change and provider documentation can be incomplete. Publishing an invented method would be worse than showing a gap. Unknown rows remain visible so readers and maintainers can distinguish verified data from unfinished research.

Change log

Directory and source history

• 2026-08-20: added calculated coverage, method distribution, row-level official evidence links and checked dates, methodology, anchor navigation, and expanded Dataset markup. No service method claim was changed in this presentation update.
• 2026-08-17: latest service-record evidence update in the current data file.
• 2026-07-28: initial claim-level source and method review for the verified service cohort.