How do I turn on two-factor authentication?

Open your security page, press Turn on beside Two-factor authentication, scan the QR code with an authenticator app and enter the 6-digit code the app shows. Then save your recovery codes, because they let you sign in if you ever lose access to your authenticator app.

Which authenticator app do I need?

Any standard authenticator app on your phone works, such as Google Authenticator, Microsoft Authenticator or Authy. The app shows a new 6-digit code every 30 seconds, and that code keeps someone who knows your sign-in details out of your account.

Set aside a few minutes, because the setup expires if you take longer than 15 minutes. Once two-factor is on, you're signed out on every other device, and you sign in there again with a code from the app.

How do I set up my authenticator app?

1. Press Turn on beside Two-factor authentication on your security page. The Set up two-factor window opens.
2. Scan the QR code with your authenticator app. If the QR code won't scan, press Can't scan it? to see a key you can type into the app instead.
3. Enter the 6-digit code the app shows, then press Turn on two-factor. If the code isn't accepted, wait for the app to show the next code and try that one.
4. Save your recovery codes in the window that opens next, then press I've saved them.

Two-factor authentication is now On, and every sign-in asks for a code from your app.

Why should I save my recovery codes?

Your recovery codes let you sign in if you lose your phone or your authenticator app, and each recovery code works once. The window shows your codes only this one time, so press Copy codes and keep them somewhere safe away from your phone, such as a password manager or a printed page.

Your security page shows how many recovery codes you have left. If only a few codes are left, or you think someone saw your codes, press New recovery codes, enter the 6-digit code from your app and press Get new codes. Your old codes stop working as soon as you get new ones. Without your app or your codes, our team can help you sign in again once we've confirmed the account is yours.

How do I turn two-factor authentication off?

Press Turn off beside Two-factor authentication on your security page, enter the 6-digit code from your authenticator app and press Turn off two-factor. Turning it off also signs you out on every device. Your account is safer with it on.