Two-factor authentication is akin to protecting your house door with two non-identical locks instead of one. Everytime you want to login, you would need to enter your password, then a code that is sent to your phone, in order to access your account. This way, if someone figures out your password, they still cannot get full access to your account.

A login alert acts like a house alarm. If FB suspects that someone gained unauthorised access to your account, or someone logged in from an unrecognised device, you will receive an email notifying you of unusual activity.

In the same way you wouldn't protect your door with a loose knot, you shouldn’t protect your account with an easy-to-guess and easy-to-crack password.

Imagine using the same key to enter your car, your home, and your office. If a thief gets a hold of your key, they can open everything else. The same goes for your online accounts, protecting them with the same password will make a hacker’s job easier.

When someone rings the doorbell, you wouldn’t blindly open the door but look out the peephole to make sure the person looks and sounds like a friend or relative you trust. Malicious actors will often reach out to you via a fake email pretending to be Facebook or Instagram. They use these emails for one of two purposes: steal your login details by asking you to fill a form, or download a virus onto your device by convincing you to click a link.