Set up two-factor authentication
Add an authenticator-app code to your sign-in with a QR scan, and save the one-time set of recovery codes it generates.
Two-factor authentication (2FA) adds a code from an authenticator app as a second proof on top of your emailed sign-in code.
- Go to Settings > Security and, under Two-factor authentication, select Set up 2FA.
- Confirm it’s you: you’ll be asked for a fresh code emailed to you, since turning on 2FA is a sensitive change.
- On the Scan the QR code screen, open an authenticator app (1Password, Google Authenticator, Authy, or similar) and scan the code, or enter the secret shown underneath manually if you can’t scan.
- Enter the 6-digit code your app generates and select Enable 2FA.
- You’ll land on Save your recovery codes, showing 10 codes and a Copy all button. These are shown only once, so save them somewhere safe, then select I’ve saved them.
From then on, signing in asks for your authenticator code (or a recovery code) on a Two-factor check screen after your emailed code, and any sensitive change to your account (disabling 2FA, connecting Google, deleting your account) asks for it too.
Switching authenticator apps or devices? You can’t re-enroll while 2FA is already on. Settings > Security tells you to disable it first. Turn off two-factor authentication, then set it up again on the new device.
Related: Recovery codes, Turn off two-factor authentication.