Here is why you must set up two-factor authentication (also called 2-step verification) wherever you can. Many places now offer it, including Facebook (called “Facebook login approvals”), Paypal (“Paypal Security Key”), Twitter, and, of course, Gmail (Google). You may recently have read the story of how Naoki Hiroshima lost their Twitter account, valued at $50,000, to a hacker. Basically the hacker managed to get into and redirect Hiroshima’s email domain, allowing the hacker to do password resets on some of Hiroshima’s accounts, and intercept the password reset emails.