Two-step sign-in.
Protect your account with a code from your phone, and keep backup codes in case you lose it.
With two-step sign-in, signing in needs two things: your password, and a 6-digit code from an app on your phone. Someone who steals your password still can’t get in.
Turn it on
- Install an authenticator app on your phone. For example Google Authenticator, Microsoft Authenticator or 1Password.
- In the app, go to Settings, then Profile.
- Under Two-step sign-in, click Turn on two-step sign-in.
- Scan the QR code with your authenticator app. Can’t scan? Type the key shown instead.
- Enter the 6-digit code the app shows, and click Turn on.
Save your backup codes
Next you see 10 backup codes. Each one lets you sign in once if you lose your phone.
- Click Download or Copy and keep them somewhere safe, like a password manager.
- We show them only once.
- Need new ones? Click New backup codes. The old ones stop working.
Signing in
Enter your email and password as usual. Then enter the code from your app. Codes change every 30 seconds.
No phone? Click Use a backup code.
Turn it off
Go to Settings, then Profile, and click Turn off. You need your password and a code.
Require it for your team
The account owner can make two-step sign-in required for everyone:
- Turn it on for yourself first.
- Go to Settings, then Team.
- Turn on Require two-step sign-in for everyone.
Teammates without it are asked to set it up before they can do anything else. The Team page shows who has it on.
Lost your phone and your backup codes?
Message us from the chat or by email, from the email address on your account. For your safety, we check that it’s really you before we turn it off.
Codes don’t work?
Check that the time on your phone is set automatically. Codes depend on the correct time.