Set up two-factor authentication

Two-factor authentication adds a second check when you sign in. After your password, you enter a 6-digit code. You can get that code from an authenticator app on your phone or by email.

The app method needs an authenticator app on your phone (any app that generates time-based codes). The email method needs nothing extra.

Choose a method

Method	How it works at sign-in
Authenticator app	You open the app and enter the current 6-digit code.
Email code	We email a 6-digit code to the address on your account.

You can have one method on at a time.

Set up an authenticator app

Open Security settings

In the sidebar, select Settings, then go to the Security card. Two-Factor Authentication shows a Disabled badge.

Start setup

Select Set Up Authenticator App. You are taken to a screen titled Set Up Authenticator App.

Scan the QR code

Under Step 1, scan the QR code with your authenticator app. If you cannot scan it, select Can’t scan? Enter key manually and type the key into the app instead.

Enter the code

Under Step 2, enter the 6-digit code your app shows. If the screen asks for a Device name, enter one, such as My iPhone.

Confirm

Select Confirm Setup.

What you should see: you return to Settings with the message “Authenticator app configured successfully!”. Two-Factor Authentication shows Enabled, and a line saying time-based codes are required at login.

If you cancel part of the way through, the page shows “Authenticator app setup was cancelled.” Select Complete Authenticator Setup to finish.

Set up an email code

Open Security settings

In Settings, go to the Security card.

Turn it on

Select Enable Email OTP.

What you should see: the message “Email OTP enabled successfully!”, and Two-Factor Authentication shows Enabled, and a line saying a code is sent to your email at login.

Sign in with two-factor authentication

After you enter your password, a screen titled Two-Factor Verification asks for your code. It reads “Enter the 6-digit code from your authenticator app”, or “Enter the 6-digit code sent to your email” if you use the email method. Enter the six digits to finish signing in.

Change to a new phone

If you use an authenticator app and get a new phone, select Reconfigure Authenticator in the Security card and scan the new QR code.

Turn it off

Select Disable MFA

In the Security card, select Disable MFA.

Confirm

The Disable Two-Factor Authentication dialog warns that you will only need your password to sign in. Select Disable MFA again to confirm.

You may be asked to sign in again

To turn off two-factor authentication you need to have signed in recently. If you have not, you see “Please sign in again to disable multi-factor authentication.” and go to the sign-in screen. After you sign in, you return to Settings with the confirmation dialog open. Select Disable MFA to finish.

What you should see: the message “MFA disabled successfully!” and a Disabled badge on Two-Factor Authentication.

Next step

Profile and password

Change your password from the same Security card.

Notification settings

Choose which alerts you get in the app and by email.