Told my buddy his 2FA advice was overkill, then lost my whole account
Last month my buddy Dave who works in IT kept nagging me to turn on 2FA for my email. I told him nah, that's for people who click on weird links, I got a strong password. Then Tuesday I got a text from my bank about a password reset I didn't ask for. By the time I logged in, someone had drained my PayPal and changed my recovery email. Dave just sent me a screenshot of our old convo with the thumbs up emoji. Cost me about $180 and a full afternoon on the phone with support. Anyone else blow off simple advice and pay for it later?