Two-factor sign-in asks for a 6-digit code from an authenticator app each time you sign in, as well as your password. It protects your account even if your password leaks.
Turning it on
- Open Settings → Security.
- Choose Set up two-factor.
- In your authenticator app (Google Authenticator, 1Password, Authy or similar), add an account using the setup key shown, or the setup link if your app accepts it.
- Enter the 6-digit code the app shows and choose Turn on.
- Save your recovery codes somewhere safe, such as a password manager. They won't be shown again.
Recovery codes
You get 10 recovery codes. Each one signs you in once, instead of an authenticator code, if you lose your phone. Security shows how many you have left and warns you when you're running low. Create new recovery codes replaces the old ones.
Signing out other devices
Lost a laptop or signed in on a shared computer? Under Sessions, choose Sign out other devices to sign out everywhere except the browser you're using.
Turning it off
Enter a current code from your authenticator app and choose Turn off two-factor.
Good to know
- Two-factor is set per person, so each member of your team turns it on for their own login.
- Owners and admins can do the most, so it matters most for them.
- Your sign-in email is in Settings → Account.