With two-factor authentication on, signing in with your password also asks for a six-digit code from an app on your phone. Someone who learns your password still can't get in.
Turn it on
- Install an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or 1Password.
- In the dashboard, go to Settings and find Two-factor authentication.
- Select Turn on and type Your account password.
- Scan the QR code with your authenticator app. If you can't scan it, add an account in the app by entering the key shown instead.
- Type the Code from the app and select Confirm.
- Save your Backup codes somewhere safe. They're shown once, and each one signs you in if you lose your phone.
Turn it off
- In Settings, under Two-factor authentication, select Turn off and confirm. Turning it on again later pairs a new authenticator from scratch.
Good to know
- Accounts with two-factor authentication sign in with their password and a code, not with an emailed sign-in link.
- Lost the backup codes? While you're signed in, select New backup codes to make a new set; the old ones stop working.