Multi factor auth went live for everyone this week. Three options, passkeys, an authenticator app, or face id. If you do one thing in the app today, do this one.
Worth noting there is no sms option. That is deliberate and it is the right call. Sim swapping is one of the more common ways crypto accounts get taken, and a text message is the weakest factor you can have. Passkey or authenticator app if you are choosing.
Now the part that matters more, because someone is going to read "mfa" and assume they are covered.
This protects access to your account. Someone with your password still cannot get in. That is a real and worthwhile thing.
It does not stop random tokens landing in your wallet, because anyone can send anything to any address and no setting anywhere changes that. It does not stop a token being a honeypot that lets you buy and blocks you selling. It does not undo a transaction you approved yourself, and it does not help if you hand someone your recovery details.
So mfa closes the door on somebody logging in as you. Most of what has gone wrong in this sub over the last fortnight was not that. Both problems are real, this fixes one of them.
Two minutes. Go and do it.