Two-factor authentication (2FA)

Two-factor authentication adds a second step after your password, so a stolen password alone isn't enough.

Before you start

• An authenticator app (for example 1Password, Google Authenticator, Microsoft Authenticator or Authy).

Turn it on

1. Open Settings → Security → Two-factor authentication and choose Enable.
2. Confirm your password.
3. Scan the QR code with your authenticator app (or type the setup key).
4. Enter the 6-digit code from the app to confirm.
5. Save your 10 backup codes somewhere safe (a password manager is ideal). Each code works once.

Signing in with 2FA

After your password, enter the current code from your app. You can choose to trust the device so you're asked less often there. If you don't have your phone, choose Email me a code (codes expire after 5 minutes) or use a backup code.

Common problems

• Codes are always rejected. Your phone's clock may be off. Turn on automatic date and time.
• Lost your phone. Use a backup code or an email code, then set up 2FA again on your new device. See account recovery.
• Running out of backup codes. Generate a new set in Security settings; old codes stop working.