Turn on two-factor authentication

With two-factor authentication, signing in needs your password and a 6-digit code from an app on your phone. Someone who learns your password still can't get in.

Before you start

• Install an authenticator app on your phone, such as Google Authenticator, 1Password or Authy.

Steps

1. Go to Settings > Security. Under Two-factor authentication it says Not enabled.
2. Click Enable two-factor authentication.
3. Scan the QR code with your authenticator app. If you can't scan it, copy the secret with the copy icon and add it to the app by hand.
4. Type the 6-digit code the app shows and click Confirm.
5. In Save your recovery codes, click Copy all and store the codes somewhere safe, such as a password manager. They are shown only once. If you lose them, create a new set while you can still sign in.
6. Tick I've saved these codes somewhere safe and click Done.

What happens next

• We email you to confirm two-factor authentication is on.
• Each time you sign in on a new device, you are asked for a code. See Sign in with two-factor, or if you've lost your phone.

Get a new set of recovery codes

1. Under Two-factor authentication, click New recovery codes.
2. Save the new codes and click Done.

All your old recovery codes stop working at once.

Turn it off

1. Click Disable.
2. In Disable two-factor authentication, enter your password and click Disable 2FA.

We email you to confirm. Your recovery codes and remembered devices are cleared.

Good to know

• If you lose your phone and your recovery codes, you can still sign in with a code sent to your email.
• Click Cancel during setup to stop without turning it on.