Two-factor authentication (2FA) adds a second step when you sign in. After your password, you enter a 6-digit code, so your password alone isn't enough to get in.
You can get the code in two ways, and you can use both:
Authenticator App: An app on your phone, such as Google Authenticator or Authy, shows the code.
Email Verification: We email you a code each time you sign in.
Set up an authenticator app
Step 1. Go to Settings > Security and scroll to Two-Factor Authentication.
Step 2. Click Set up next to Authenticator App.
Step 3. Scan the QR code with your authenticator app, then click Next. If you can't scan it, type in the code shown under Or enter this code manually: instead.
Step 4. Type the 6-digit code from your app and click Verify.
Step 5. Save your backup codes. Use Copy all or Download, and keep them somewhere safe. Each code works once, and they get you in if you lose your phone.
Step 6. Tick I have saved these codes and click Done.
Set up email codes
Go to Settings > Security and turn on the Email Verification switch in Two-Factor Authentication. You'll get a code by email the next time you sign in.
Sign in with 2FA
Sign in with your email and password.
If you use both methods, choose Authenticator or Email.
Type the 6-digit code and click Verify.
If an email code doesn't arrive, click Resend code.
Turn off 2FA
Email Verification: Turn off its switch.
Authenticator App: Click Disable, enter your Current Password and your Authenticator Code, then click Disable 2FA. To use it again, you'll have to set it up from the start.
Common questions
What if I can't get a code?
Click Use a recovery code instead on the sign-in screen and enter one of your backup codes. If you have no codes left, email [email protected]. See Backup Recovery Codes.
Where do I get new backup codes?
Once 2FA is on, click Manage next to Backup Codes in Two-Factor Authentication, then click Regenerate Codes. Your old codes stop working.
Related articles