Two-factor authentication

Two-factor authentication (2FA) asks for a six-digit code from an authenticator app each time you sign in, on top of your password. Owners can require it for everyone with Enforce 2FA on the Organisation tab of Account and profile.

Before you start: install an authenticator app such as Google Authenticator, 1Password or Authy on your phone.

Turn it on

1. Open Settings, then Account, then the Security tab.
2. Under Two-factor authentication, select Enable two-factor. If you already have it on, Enrol another device adds another phone.
3. Scan the QR code with your authenticator app. If you cannot scan, use Copy key to enter the key by hand.
4. Enter the Six-digit code the app shows. The code refreshes every 30 seconds.
5. Select Activate.
6. Save your recovery codes. They show once. Each one signs you in a single time if you lose your phone. Select Copy codes, store them somewhere safe, then select I have saved them.

The setup page also offers Skip for now. If your organisation enforces 2FA, you are asked again at your next sign-in.

The setup page starts a new enrolment as soon as it opens, and the verification page only appears mid-sign-in, so this guide has no screenshots of them.

Sign in with a code

1. Sign in with your email and password.
2. On Two-factor authentication, enter the Authentication code from your app.
3. Select Verify.

Use a recovery code

If you lost your phone, switch the page to recovery mode with the link under the form. Enter one Recovery code (it looks like xxxx-xxxx-xxxx) and select Verify. Each code works once. After you sign in, set up your new device from the Security tab.

If you also lost your recovery codes, select Lost your device? Email me a reset link on the verification page. The link works for 30 minutes and asks for your password.

Related

• Sign up and sign in