Set up two-factor authentication (2FA)

Two-factor authentication (2FA) adds a second step to signing in: your password plus a one-time code from an authenticator app on your phone. Even if someone learns your password, they can’t get in without your device.

What you’ll need

• Your phone with an authenticator app installed — for example Google Authenticator, Microsoft Authenticator, Authy, or 1Password.

Turn on 2FA

1. Go to your Account Profile and find the Two-factor authentication section.
2. Click Enable authenticator app.
3. On Set up authenticator app, scan the QR code with your authenticator app. (Can’t scan? Use “Can’t scan? Enter this code” to type the key in manually.)
4. Enter the 6-digit code your app shows, then click Verify.

Save your recovery codes

1. You’ll then see Save your recovery codes — store these somewhere safe (use Copy all or Download). They’re the only way back in if you lose your phone, and you won’t see them again.
2. Tick “I’ve saved my recovery codes” and click Done.

That’s it — your account shows Enabled, and from now on sign-ins ask for a code from your authenticator app.

Managing 2FA later

In the same section you can:

• Regenerate recovery codes — get a fresh set (the old ones stop working).
• Disable 2FA — note this makes your account less secure, since only your password will be required, and your recovery codes stop working.