Two-Factor Authentication
Add a second layer of security to your account with an authenticator app.
Two-factor authentication (2FA) adds a second step to logging in: after your password, you also enter a short code from an app on your phone. Even if someone learns your password, they can't get in without your phone — so it's one of the best things you can do to protect your account.
What you'll need
A free authenticator app on your phone, such as:
- Google Authenticator
- Microsoft Authenticator
- Authy
- 1Password (or any TOTP-compatible app)
Turning on 2FA
- Open your Profile from the account menu.
- Find the Two-factor authentication section and start the setup. (You may be asked to confirm your password first.)
- A QR code appears. In your authenticator app, choose add account and scan the QR code (or type the setup key shown).
- Your app now shows a 6-digit code that changes every 30 seconds.
- Enter the current code to confirm, then finish.
- Save your recovery codes somewhere safe (see below).
From now on, logging in asks for a code from your app after your password.
Recovery codes
When you enable 2FA, you're given a set of one-time recovery codes. Use one to get in if you ever lose access to your phone.
Store your recovery codes somewhere safe and private — a password manager is ideal. Each code works only once. If you lose both your phone and your recovery codes, you'll need your administrator to help you back into your account.
Logging in with 2FA
- Enter your email and password as usual.
- When prompted, open your authenticator app and enter the current 6-digit code.
- If you don't have your phone, choose Access with a recovery code and enter one of your saved codes.
Turning off 2FA
You can disable 2FA from the same Profile section. For your security, consider leaving it on — it's a small step that makes a big difference.