Two-factor authentication

We strongly recommend turning on two-factor authentication (2FA) on your account. With 2FA enabled, signing in needs both your password AND a 6-digit code from your authenticator app.

Setting it up

1. Go to Profile → Two-Factor.
2. Scan the QR code with an authenticator app (1Password, Authy, Google Authenticator, Apple Passwords, etc).
3. Enter the 6-digit code your app shows to confirm.
4. Save your recovery codes. This is the important part — see below.

Recovery codes

When you turn on 2FA we give you a list of one-time recovery codes. Each one works once and lets you sign in if you lose access to your authenticator (phone broken, lost, replaced).

Save these codes somewhere safe — a password manager, a printed copy in a drawer, etc. Don't store them on the same device as your authenticator.

If you lose both your authenticator AND your recovery codes, contact us — we'll verify your identity through other means before resetting 2FA. Allow up to one business day for that process.