Turn on two-factor authentication

Two-factor authentication (2FA) adds a second step to sign-in: after the email link or code, you enter a code from an authenticator app. It is available on every plan, including Free.

What you need

Any authenticator app that supports TOTP (time-based one-time passwords), such as the authenticator built into your password manager or a standalone authenticator app on your phone.

Turn it on

1. Go to Settings. The Account tab shows Two-factor authentication with its status.
2. Choose Set up two-factor authentication.
3. Under Add this account to your authenticator app, copy the secret into your app. Apps that accept otpauth:// links can use the setup link instead. The secret is shown only now; anyone who has it can generate your codes.
4. Enter the 6-digit Code from the app and choose Confirm and turn on.
5. Save the Recovery codes. Each code signs you in once if you lose your authenticator. They will not be shown again.

Signing in with 2FA

After the email step, the sign-in page asks for the Authentication code from your app. If you do not have your device, choose Use a recovery code and enter one of your saved codes. Each recovery code works once.

Regenerate recovery codes

If you used several codes or think they were exposed, choose Regenerate recovery codes. You need a current code from your app (or a recovery code). The old codes stop working.

Turn it off

Choose Turn off two-factor authentication and confirm with a current code or a recovery code.

Review sessions and activity

The same page lists Signed-in sessions with when each session started, was last active and expires. Sign out any session you do not recognize, or choose Sign out here. Account activity shows security events such as sign-ins and MFA changes.

Lost your device and recovery codes?

Recovery codes are the self-service way back into your account when the authenticator is unavailable, so store them in a safe place, separate from your phone, for example in a password manager.