Two-factor authentication

With two-factor authentication, signing in takes your password and a 6-digit code from an authenticator app on your phone, such as 1Password, Google Authenticator, Microsoft Authenticator or Apple Passwords. Someone who learns your password still can’t sign in as you.

It’s in Settings → Account & security → Two-factor authentication.

Set it up#

1. Select Set up.
2. Scan this QR code with your authenticator app. On a phone, Open in authenticator app adds it without scanning. You can also copy the key under Or enter this key by hand: with Copy the key.
3. Enter the 6-digit code the app shows and select Verify.
4. Save your recovery codes (below): select Copy all and keep them somewhere safe, such as a password manager. Tick I’ve saved my recovery codes, then select Done.

Setting it up signs you out on your other devices. When you sign in there again, they ask for a code.

From then on, after your password, enter the code from your authenticator app. See Signing in.

Recovery codes#

Setting up gives you ten recovery codes. If you lose your phone, a recovery code lets you sign in. Each one works once, and they’re shown only that one time.

• While two-factor is on, Recovery codes shows how many you have left.
• Create new codes gives you a fresh set of ten. Your current recovery codes stop working.

Sign in with a recovery code#

On the code screen, select Use a recovery code and type one of your codes. It has 10 letters and digits. Using a recovery code turns two-factor off, and the app asks you to set it up again right away, on your new phone.

After several wrong codes, you have to wait before trying again.

Turn it off#

Select Turn off two-factor and confirm with Turn off. Signing in then needs only your password, and your recovery codes stop working.

If an org you’re in requires two-factor, you can’t turn it off: the page says Required by that org. See Require two-factor authentication.