What’s the Best Two-Factor Authentication Method?

When you have a choice, that is.

by

Not all two-factor authentication works the same way. Some methods are more secure, some are more convenient, and some leave you open to sneaky attacks like SIM swapping. Here's my breakdown of hardware keys, authenticator apps, texts, email, and voice codes so you can pick what fits you best.
A closeup over the shoulder shot of a Corgi looking at his Windows PC. In his paw is a mobile phone displaying a TOTP app and code, and the computer's screen has a message "Please enter code generated by your authentication device."
(Image: Google Flow)
Question: Use two-factor; I get it. But there are several kinds. Which one should I use?

There are several approaches to two-factor authentication, and it can be confusing. Some are simpler, some are more convenient, and some are more secure than others.

Let’s compare the various ways two-factor authentication, or 2FA, can be implemented.

Read more

Should I Avoid Windows Update? It Burned Me

Only if you like living even more dangerously.

by

A bad Windows Update can cripple your computer. Once it happens to you, it's tempting to swear off updates forever. I'll explain why that's the wrong move, and share one habit that makes any update failure, from Windows or anything else, easy to recover from.
An over the should angle of a Corgi looking at a PC computer screen showing Windows Updates in progress.
(Image: Google Flow)
Question: I recently took an update via Windows Update, and after doing so, my machine wouldn’t even boot. It took a technician hours to get it working again. That’s not something I can afford to have happen again. I’m avoiding Windows Update from here on out.

That’s a conglomeration of many questions and problem reports I’ve received over the years. The pace picked up when Windows 10 was released.

Windows Update has a reputation for occasionally causing working systems to fail. The good news is, it’s almost always a tiny percentage of machines affected. The bad news is, that’s no solace if you’re affected.

I absolutely sympathize. I can understand why you’d be skittish about ever taking an update again.

And yet, you should.

Read more

Why Don’t I Get Sound From My Computer?

A 12-step checklist.

by

Computer gone silent? Here's a checklist to get your sound working again in minutes.
A Corgi at a bright, modern desk tilting his head looking quizzically at a laptop screen with a large, playful, oversized muted speaker icon glowing above it.
(Image: Google Flow)
Question: Try as I might, I can’t get my computer to output sound. Nothing. I can’t figure out what’s wrong.

That’s a composite of questions I get often. Sometimes it applies only to specific applications; other times, it applies to the entire device.

This problem can come from several sources.

Let’s run down a checklist.

Read more

If Too Many Bad Password Attempts Cause Account Locks, How Do Hackers Hack In?

They use the back door.

by

Ever wonder why hackers don't get locked out after a few failed password attempts, the way you do? It turns out they rarely even try. I'll describe the sneakier "back door" methods -- data breaches, malware, and phishing -- that hackers use to break into accounts, and what you can do to stop them.
An over the shoulder perspective of a puzzzled looking Corgi looking at a computer screen with the error message "Locked Out!" on it.
(Image: Google Flow)
Question: I have a question about passwords for online accounts. If I type my password wrong three times in a row, I can get locked out of my email account until it’s been reset. So if hackers rapidly try the whole dictionary, why doesn’t the account get blocked and I get notified of the intrusion? I’ve read your articles, but they don’t address why an intrusion notification or lockout doesn’t happen if many different passwords are tried in rapid succession.

Yup, after a few failed attempts at the login page, most services lock either the account or the IP address from which the attempts are being made.

Here’s the thing: that’s not how hackers hack, and it’s certainly not how they perform brute force attacks that try every possible password.

Nope. Instead of knocking politely at the front door, hackers try to barge in the back.

Read more

What’s Better, NAS or Cloud Storage?

Not better. Complementary.

by

NAS or cloud? Each has real strengths and real risks, and a recent story about a broadcaster losing 50TB of archives shows what can go wrong. I'll detail pros and cons for each and show how combining both keeps your data safer than relying on just one.
A Corgi weighing two options held up in his paws. On one side a cloud representing cloud storage, and in the other a NAS. The Corgi looks thoughtful.
(Image: Google Flow)
Question: What is the advantage of a NAS over cloud storage?

The advantage of NAS (Network Attached Storage) over cloud storage is only a quarter of what’s important to consider, which include the advantages of cloud storage over NAS and the risks involved in using either.

It’s not an either/or situation. I use both.

Depending on your situation, you might as well.

Read more

What Security Software Do You Recommend? (2026 Q3 update)

Basic protection in four steps.

by

My updated guide cuts through the hype with four no-nonsense steps to keep your PC safe. Learn what works, what to avoid, and how to stay secure without overspending or overcomplicating.
A Corgi sitting in front of a PC displaying Windows Security. The Corgi looks at the camera and gives a "thumbs up".
(Image: Google Flow)

Question: What security software should I use? What anti-virus is best? How about a firewall? And what about spyware? Should I use one of the all-in-one packages that claim to do everything? Is there anything else I need?

I get these questions constantly. There’s a fair amount of churn and drama in the security industry; things change over time.

It’s time once again for my periodic update. Not a lot has changed in the last year, but there are some new things to consider.

Read more

How Do I Fix Windows Update?

Several things to try.

by

Windows Update can get stuck, and it's rarely obvious why. I'll walk you through Microsoft's troubleshooter, and provide a full manual reset using command line tools, so you can get your updates flowing again.
A bored looking Corgi looking at a PC's computer screen displaying "Working on updates".
(Image: Google Flow)
Question: I returned from vacation and found that Windows Update would not download any of 90 available updates (even though it sat for many hours saying “downloading,” nothing was coming). I eventually used the Windows Readiness program and was able to get 15 or so downloaded and installed, but trying the next group again, it is not downloading anything. There is no error message, just no action at all.

While it works well most of the time, problems with Windows Update can be very frustrating. There’s often no specific fix for whatever situation you’re faced with other than to “keep trying” or “let it run”… neither of which helps in many cases.

Fortunately, Microsoft has added a troubleshooter and outlined what I’ll call the nuclear option: resetting Windows Update completely. Regardless of the problem, if it involves Windows Update, I suggest you give this a try.

Read more

How Do I Make Sure I Don’t Have Malware?

An important answer you need to understand.

by

The hard truth is that you can never fully prove your computer is malware free... but you can still stack the odds in your favor. I'll discuss why, the habits that keep you safer online, and what to do if something slips through.
A close up of a Corgi examining a Windows PC's screen with a magnifying glass. Seen through that is the word "No Malware Guarantee!" with the international "no" symbol across it.
(Image: Google Flow)
Question: How do I find out or know that my computer is free of keyloggers? Would Windows Defender or MalwareBytes find them if there are any, or do you have a referenced article on the topic where I can read about it? Understand that this is the biggest security concern I have about my computer nowadays.

How do you know your computer is free of keyloggers? You don’t.

That’s not the answer most people want to hear, but it’s the true bottom line.

I’ll talk about what you and I need to do in the face of this rather grim reality.

Read more

How Often Should I Scan My Computer for Malware?

You? Rarely. Your system? Constantly.

by

Find out when a manual scan makes sense, and how often you should run one for peace of mind.
Corgi lounging in front of his Windows 11 PC which displays a message "Running Security Scan"
(Image: Google Flow)
Question: I’m confused. You keep saying I should have up-to-date anti-malware tools, great. But how often do I use them? Don’t I need to scan every so often? How often?

The short answer is that with proper security software, you need to do nothing. The security software will scan automatically. I’ll expand on that in a moment.

The longer answer is that even with good security tools, you might want to occasionally run a scan. The definition of “occasionally” depends on your level of concern and whether or not you think you’re experiencing a malware-related issue on your computer.

Read more

Will Ransomware Encrypt Backups?

How to protect yourself in case they do.

by

Worried that ransomware could sneak past your defenses and encrypt your backups? Most ransomware won't, but it's not impossible. I'll discuss how ransomware picks its targets, why your backup image files are usually safe, and one simple habit to keep your files protected.
A Corgi in front of a Windows computer in an office setting. On the computer is a ransomware warning. The corgi looks concerned.
(Image: Google Flow)
Question: I wonder if a backup system that uses an external disk is safe from ransomware. I have Acronis True Image, paid version, and do a full backup once a month and an incremental daily. Can ransomware get to that backup? It is, in reality, just another disk in my system.

The best we can say is… maybe.

And maybe has been slowly changing over time to something closer to possibly.

It depends on a lot of things, including the type of backup, where it’s stored, and most importantly, the specific ransomware involved. There are many types (or variants) of ransomware, each with different characteristics.

Fortunately, there’s an easy way to keep your backups safe.

Read more

Where Do I Get Driver Updates?

Where to find them and places to avoid.

by

I'll explain when driver updates matter, why most scanning tools aren't worth your trust, and where to find real updates when you truly need them.
A Corgi looking concerned at a Windows PC computer screen with a larger error message saying "Security Issue! Device Drivers are out of date! Click to Update!"
(Image: Google Flow)
Question: I downloaded three separate ‘check drivers’ programs. Each program identified seven drivers as being outdated. However, my Device Manager says they’re OK. It’s been very difficult to find the drivers, and if they are outdated, I will have to purchase one of the driver programs. Do I need to update these drivers? If so, how do I find the sites to download them?

Device Manager will not tell you whether or not a device driver is out of date; that’s not its job. What it tells you is if the device driver is installed and working at some basic level.

Finding out whether your device drivers are out of date isn’t easy, and neither is getting the updates.

I’ll review the options and describe what I do.

Read more

Why ANY Two-Factor Is Better Than No Two-Factor

Even if it is hackable.

by

You may have heard that hackers can sometimes beat two-factor authentication. It's true, but that doesn't make it useless. I'll describe how each type of two-factor works, which ones hackers can trick, and why skipping 2FA is still the riskiest choice of all.
A Corgi facing us holding a padlock in each upturned paw. One padlock is labelled "Something you know", and the other "Something you have"
(Image: Google Flow)

This is an update to an article that originally discussed only SMS two-factor authentication. Since then, two things have happened.

  • An exploit kit that allowed a phishing attack to hijack a two-factor-secured login was published.
  • Various media outlets declared, “Two-factor has been hacked!”

Unfortunately, these instances led some to believe that two-factor authentication is pointless. To quote a reader: “This makes 2SV quite useless in many cases.”

NO! Just… no. That’s a seriously mistaken conclusion.

I’m revisiting this topic because I want to make this clear: two-factor authentication is not useless. In fact, two-factor authentication — SMS-based or otherwise — is significantly more secure than not using two-factor authentication at all.

Read more

Clickfix: What It Is and How to Avoid It

Scammers and hackers get sneakier all the time.

by

ClickFix is a scam that turns a simple "prove you're human" (or other fake message) pop-up into a malware trap, using your own keystrokes to install it. I'll discuss how it works, where you'll find it, and the one red flag that gives it away every time.
A close up over-the-shoulder perspective of a Corgi using a Windows computer with a "Prove you're a Corgi" message on screen.
(Image: Google Flow)

You’re surfing along on the internet, and you get another one of those “prove you’re human” pop-up messages. Instead of being an obscure “click every square that has a bicycle” CAPTCHA (yay?), this has instructions that are easy to follow: click here, type that, and prove your humanity.

You also installed malware on your device.

This one is sneaky.

Read more

Why Did My Security Software Not Detect a Virus on My PC?

Sometimes even the best software can’t protect you.

by

Malware can slip past even a good antivirus program. Using my silliest metaphor yet, I'll explain vulnerabilities, exploits, and what actually keeps you safe. Learn how infections happen and what you can do about it.
A Corgi in a bathroom. There are two holes in the walls in different places, each with an eye peering in.
(Image: Google Flow)
Question: Why would an exploit not be caught or detected by my antivirus program? If not detectable, how much damage can the exploit actually do if users follow prudent operating precautions? Would System Restore be usable if infected? I also follow your advice and routinely image my Dell laptop.

Your question is a good one: how can malware get past anti-malware programs and infect your PC?

And more importantly, what can you do to protect yourself?

Let’s define some terms with what may be my silliest metaphor ever, and then talk about how to stay safe.

Read more

Your 6 Strongest Practical Password Techniques, Ranked

Aim for the best.

by

Not all passwords are created equal. Some resist hackers for centuries; others fall in seconds. I'll rank six password techniques from strongest to weakest, including one horrible password I still remember from 45 years ago, and how even that can be made secure.
A corgi standing in front of a 1970's era computer keyboard and monitor with "User: everyone" and "Password: iforgot" on it
(Image: Google Flow)

After over 45 years, I can still remember the password we used to access a status terminal in the computer center at school.

iforgot

A memorable but horrible password.

It was appropriate at the time because it was a public-access terminal — anyone could sign in — and for some reason, a password of some sort was required. They made it simple and posted it on the terminal itself.

There was zero security.

You want something better. There are several techniques for generating strong passwords. I’ll review some from best to worst.

Read more

How Do I Make Sure Windows is Really, Completely Up to Date?

“As up to date as possible” is an important recommendation.

by

Windows Update usually keeps your PC current, but not always right away. I'll show you how to check for updates until none are left, so you can be confident your Windows computer is as up to date as it can be.
A Windows computer screen with the attached image on it being looked at by a Corgi in his home office.
(Image: Google Flow)
Question: When trying to solve a problem, one of your steps is to “make sure Windows is as up to date as possible.” Doesn’t Windows do that automatically?

Yes.

And no.

Even with Windows Update turned on and working properly, you might find more updates are available. Let me explain what I mean by “Make sure Windows is as up to date as possible.”

Read more

Tips, Tricks, and Best Practices for Sharing Links

How to share URLs that work.

by

Sharing a link seems simple, but some methods create long, broken, or trackable URLs. I'll show you how to copy clean links, strip out tracking codes, shorten long URLs, link to a highlight or video moment, and check that the link will work.
A close up over-the-shoulder perspective of a Corgi using a Windows computer. the attached screenshot is on the screen, and the Corgi has right clicked on the address bar and is about to click on the "Copy" menu item.
(Image: Google Flow)

We all share links from time to time. We discover a webpage we want others to see, so we use some sharing technique to send that page to our friends via email, social media, instant messaging, or something else.

Some of those techniques are less efficient/more fragile ways to share links, and some are better.

Let’s make sure we’re sharing links in the best ways possible.

Read more

How to Avoid Ransomware

Three things you’re hopefully already doing.

by

Ransomware can lock up every file on your computer and hold it hostage until you pay. I'll discuss defenses that work, why backups are your best insurance, and why you should never, ever pay the ransom.
Corgi showing fear in front of a computer screen which has a hand coming out of it as if asking for money.
(Image: Google Flow)
Question: How can I prevent criminals from encrypting files on my hard drive and then demanding a ransom to unlock the data? Is having a router and software firewall enough?

In other words, how do you avoid ransomware?

Let’s look at ransomware — software that holds your data hostage until you pay up — and how best to protect yourself.

Spoiler alert: you already know the answer.

Read more

Why Ask Why?

Why, indeed.

by

Wonder why software makers make the choices they do? Me too. But asking "why" rarely brings relief... except in one case.
A Corgi standing in front of his computer with his paws up in the air in frustration, and a thought bubble with "WHY?!?!?" in it
(Image: Google Flow)

I was helping a friend the other day with some Windows issues, and a not-uncommon question came up, one that I often dread.

“Why?” As in, “Why did they do that?”

It’s a common question that gets applied to computers and software of all generations and iterations. Recent versions of Windows have certainly generated a healthy share of “Why?” questions — but trust me, it’s nothing new.

The problem is, asking “Why?” is most often a frustrating and fruitless exercise.

Read more

Copyright © 2026 · Ask Leo! · All Rights Reserved.