Why enable 2FA?
Two-factor authentication (2FA) adds a one-time code to your login. Even if your password leaks, an attacker cannot reach your services without the code from your phone or password manager.
Step 1 — Open security settings
Click your avatar in the top-right and choose Security. Find the Two-Factor Authentication card and click Enable 2FA. Enter your account password and click Continue.
Step 2 — Scan the QR code
Open any TOTP authenticator app and scan the QR code. If you can't scan it, type the setup key shown below it instead. Common choices:
- Google Authenticator
- 1Password / Bitwarden / Dashlane
- Authy
- Microsoft Authenticator
Step 3 — Confirm a code
Type the 6-digit code from your app and click Verify and Enable. 2FA is now active.
Step 4 — Save your recovery codes
The panel shows 8 one-time recovery codes. Use Copy Codes or Download Codes and save them somewhere safe; a password manager is ideal. They are shown only once. If you lose your authenticator, these codes are the only way back in without contacting support.
If you lose both your authenticator and your recovery codes, support will need to verify your identity before resetting 2FA. Save the codes.
Asking for the code at sign-in
The Security page shows whether 2FA is asked for at sign-in. If it shows Sign-in: Off, click Also ask for my code when I sign in. You will then be asked for your code when signing in from a new device.
Disabling 2FA
You can turn 2FA off from the same Security page. Click Disable 2FA (or Remove authenticator if sign-in codes are off) and confirm with your password and a code. We strongly recommend keeping it on for any account that controls servers or billing.