Turn on two-step verification

With two-step verification on, signing in with a password also asks for a code from an authenticator app on your phone.

Turn it on

1. Go to Profile › Security.
2. Under Two-step verification, select Turn on.
3. Scan the QR code with an authenticator app, such as 1Password, Google Authenticator or Authy. If you can't scan it, enter the key shown instead.
4. Enter the Code the app shows and select Turn on.
5. Save your recovery codes. Copy or Download them and keep them somewhere safe.

Recovery codes

Each code signs you in once if you lose your phone. The card shows how many you have left. To get a fresh set, select New recovery codes; your old codes stop working.

Turn it off

Select Turn off under Two-step verification. Signing in then asks only for your password or a passkey.

Passkeys and two-step

A passkey already proves it's you, so signing in with one doesn't ask for a code. See /help/account-and-security/sign-in-with-a-passkey.