Security

What is two-step authentication?
I sold or lost my phone and cannot complete two-step authentication anymore. What should I do?
My phone number is correct, but I'm not receiving the two-step authentication SMS texts. What can I do?
My phone number is correct, but I'm not receiving the two-step authentication phone calls. What can I do?
Two-step authentication isn't working for me. How can I troubleshoot this?
What is an authenticator app?
How do I set up an authenticator app for two-step authentication?
Why is my authenticator code not working?
Why do I need two-step authentication to get into my account?
How do I update my two-step authentication?
I'm getting a new phone. Will my authenticator app keep working?
Can I turn off two-step authentication?
Why am I periodically asked to reauthenticate?
What is social sign-in?
How do I sign in using Google or Apple? 
Do I need a CarMax account to use social sign-in?
What info does CarMax collect when I sign in with Google or Apple?
I already have a CarMax account. What happens if I sign in with a Google or Apple account that uses the same email?
Will I be asked to create a password if I use social sign-in?
Why am I asked for a verification code after signing in with Google or Apple?
What is Apple's "Hide My Email" option?
What happens to my CarMax account if I use "Hide My Email"?
Will my in-store and online activity stay in sync if I use "Hide My Email"?
What if managing a hidden email address becomes too complicated?
What happens if I stop forwarding emails through Apple's "Hide My Email"?