Turn on two-factor authentication

Two-factor authentication (2FA) asks for a 6-digit code from an authenticator app each time you sign in, on top of your password. Turn it on from the Security tab in Settings. It's free on every plan.

Before you start

Install an authenticator app on your phone, such as Google Authenticator, 1Password, or Authy.

Steps

1. Go to Settings (opens in a new tab) and open the Security tab.
2. On the Two-Factor Authentication card, choose Enable Two-Factor Authentication.
3. Scan the QR code with your authenticator app. Can't scan it? Choose Copy and enter the secret key in the app by hand.
4. Enter the 6-digit code from the app and choose Verify & Enable.
5. Save the 10 backup codes shown next. Choose Copy all or Download .txt, keep them somewhere safe, then choose I've saved my codes — Done.

How it works

• Each time you sign in with a password, Google, or Apple, you're asked for the current code from your app.
• A backup code works in place of the app code. Each backup code works once.
• Signing in with a passkey skips the code prompt, because a passkey already proves you have the device.
• Some sensitive changes, like changing your email or password, ask for a code again first.

Good to know

• Running low on backup codes? The Backup Codes card shows how many unused codes you have. Choose Generate Codes (or Regenerate Codes) to get a fresh set. Older codes stop working right away.
• Turn it off by choosing Remove on the Two-Factor Authentication card and confirming.

FAQ

Is two-factor authentication a Pro feature? No. It's available to every user on every plan.

What if I lose my phone with the authenticator app? Sign in with one of your backup codes. Each code works once, and you can generate a new set from the Backup Codes card.

How do I turn it off? Choose Remove on the Two-Factor Authentication card and confirm.