Two-factor authentication (2FA) adds a second lock to your account, so a stolen password alone is not enough to sign in.
Two ways to use 2FA
- Email code - a 6-digit code is emailed to you at sign-in.
- Authenticator app - scan a QR code once, then your app shows a code that changes every 30 seconds.
Turn it on
Open Security & 2FA in your account menu and follow the steps. Each time you start setting up an authenticator you get a new QR code - scan the one on screen.
Recovery codes
You are shown recovery codes once. Keep them somewhere safe. See *Recovery codes: what to do if you lose your 2FA device*.
Turning it off
Turning 2FA off needs your password for safety.
We never ask for your password or codes by email, phone or chat.