Turn on two-factor authentication

Two-factor authentication asks for a 6-digit code after your password, so a stolen password alone cannot open your account. You turn it on from Settings.

Pick a method

The Security card offers two ways to get the code:

• Authenticator app. You need an authenticator app on your phone that makes time-based codes.
• Email code. We send the code to your email at sign-in. You need nothing extra.

Turn it on with an authenticator app

Open Security

In the sidebar, select Settings, then go to the Security card. Two-Factor Authentication shows a Disabled badge.

Start setup

Select Set Up Authenticator App. You go to a screen with the same title.

Scan the QR code

Under Step 1, scan the QR code with your app. If you cannot scan, select Can’t scan? Enter key manually and type the key into the app.

Enter the code

Under Step 2, enter the 6-digit code from your app, then select Confirm Setup.

Two-Factor Authentication in the Security card, before setup.

What you should see: you return to Settings with “Authenticator app configured successfully!”. Two-Factor Authentication shows Enabled, and says time-based codes are required at login.

If you leave setup part way, you see “Authenticator app setup was cancelled.” Select Complete Authenticator Setup to finish.

Turn it on with an email code

Open Security

In Settings, go to the Security card.

Enable it

Select Enable Email OTP.

What you should see: “Email OTP enabled successfully!”, and Two-Factor Authentication shows Enabled and says a code is sent to your email at login.

Signing in afterwards

Enter your email and password as usual. A verification screen then asks for the code: “Enter the 6-digit code from your authenticator app”, or “Enter the 6-digit code sent to your email”. Enter the six digits and select Verify.

Got a new phone? Select Reconfigure Authenticator in the Security card and scan the new QR code.

Turn it off

Select Disable MFA

In the Security card, select Disable MFA.

Confirm

The Disable Two-Factor Authentication dialog warns that you will only need your password to log in. Select Disable MFA again.

You may be asked to sign in again

You must have signed in recently to turn this off. If not, you see “Please sign in again to disable multi-factor authentication.” and go to the sign-in screen. After you sign in, you return to Settings with the dialog open. Select Disable MFA to finish.

What you should see: “MFA disabled successfully!” and a Disabled badge.

If you lose access to your code

If you lost your phone or cannot get the email code, you cannot turn two-factor authentication off yourself, because that needs you to sign in. Contact support for help.

For a short comparison of the two methods, see Two-factor authentication.

Next step

Change your password

Update your password from the same Security card.

Contact support

Locked out? We can help.