Enable two-factor authentication (2FA) and backup codes

With two-factor authentication (2FA) enabled, signing in with your password also requires the 6-digit code from your phone's authenticator app. A stolen password alone cannot access your account. Use a TOTP app such as Google Authenticator or Authy.

How do I enable 2FA?

1. My Profile: open the Security tab.
2. Two-Factor Authentication (2FA): select Start 2FA setup.
3. Scan the displayed QR code with your authenticator app. If you cannot scan it, manually enter the value under Secret key (manual entry) into the app.
4. Enter the app's 6-digit code into 6-digit code from the app and select Verify and enable.
5. 8 backup codes appear. Copy codes lets you save them securely, then select Saved, close.

Backup codes

Use a backup code to sign in when you cannot access your phone. Remember:

• Each backup code is single-use.
• Codes are shown only when created and cannot be viewed again. Store them securely, such as in a password manager.
• The card shows your remaining backup code count.

Regenerating backup codes

If codes are lost or running low, select Regenerate backup codes in the same card. Enter your app code to continue. This generates 8 new codes and invalidates all old codes.

How do I disable 2FA?

In the same card, select Disable. Enter your current authenticator code and password. Without your phone, choose I do not have my phone; use a backup code to use one of your backup codes.

Using with a passkey

If you added a passkey, passkey sign-in replaces two-factor authentication because it includes device verification. See Signing in with a passkey.

To review sessions and new-device alerts, read Sessions and new-device alerts.