Two-factor authentication

Two-factor authentication (2FA) asks for a code from an authenticator app after your password, so a stolen password alone can't get into your account. It works with standard authenticator apps such as Google Authenticator, 1Password, Authy and Microsoft Authenticator.

Turn it on

1. Open My Profile → Security → Manage two-factor authentication.
2. Choose Enable two-factor authentication.
3. Scan the QR code with your app — or type in the setup key shown under it.
4. Save your recovery codes somewhere safe (Copy codes copies all ten).
5. Enter the 6-digit code your app shows right now and choose Verify & turn on.

Nothing changes until that last step succeeds, and setup has to be finished within 10 minutes.

Signing in

After your password you'll be asked for the 6-digit code from your app. Lost your phone? Choose Use a recovery code and enter one of your saved codes. Each recovery code works once; the Security page shows how many you have left. To get a fresh set, turn 2FA off and on again.

Turn it off

On the same page, enter a current code from your app or a recovery code and choose Disable 2FA.

If you've lost both your phone and your recovery codes, contact us and choose Support & Billing.