How do I turn on two-factor authentication?

Open your security page, press Turn on beside Two-factor authentication, scan the QR code with an authenticator app and enter the 6-digit code the app shows. Then save your recovery codes, because they let you sign in if you ever lose access to your authenticator app.

Which authenticator app do I need?

Any standard authenticator app on your phone works, such as Google Authenticator, Microsoft Authenticator or Authy. The app shows a new 6-digit code every 30 seconds, and that code keeps someone who knows your sign-in details out of your account.

Set aside a few minutes before you start, because the setup has to be finished within 15 minutes of starting it, or it expires and you start again. Turning on two-factor authentication signs you out on every other device, so you sign in again there with a code from the app.

How do I set up my authenticator app?

1. Press Turn on beside Two-factor authentication on your security page. The Set up two-factor window opens.
2. Scan the QR code with your authenticator app. If the QR code will not scan, press Can't scan it? to see a key you can type into the app instead.
3. Enter the 6-digit code the app shows, then press Turn on two-factor. If the code is not accepted, wait for the app to show the next code and try that one.
4. Save your recovery codes in the window that opens next, then press I've saved them.

Two-factor authentication is now On, and every sign-in asks for a code from your app.

Why should I save my recovery codes?

Your recovery codes let you sign in if you lose your phone or your authenticator app, and each recovery code works once. The window shows your codes only this one time, so press Copy codes and keep them somewhere safe away from your phone, such as a password manager or a printed page.

Your security page shows how many recovery codes you have left. If only a few codes are left, or you think someone saw your codes, press New recovery codes, enter the 6-digit code from your app and press Get new codes. Your old codes stop working as soon as you get new ones. Without your app or your codes, our team can help you sign in again once we have confirmed that the account is yours.

How do I turn two-factor authentication off?

Press Turn off beside Two-factor authentication on your security page, enter the 6-digit code from your authenticator app and press Turn off two-factor. Turning two-factor authentication off also signs you out on every device, so you sign in again afterwards, and your account is safer with it on.