1.5Securing your account with two-factor authentication

Chapter 1 · Getting started·1 min read·2 topics

Two-factor authentication adds a 6-digit code from an authenticator app (Google Authenticator, 1Password, Authy or similar) to every sign-in. Even if your password leaks, nobody can get in without your phone.

#Turning it on

  1. Go to Settings → Team & Access → Security. The status tag shows Not enabled.
  2. Click Enable two-factor.
  3. Scan the QR code with your authenticator app, or click Copy next to the secret and enter it manually.
  4. Type the 6-digit code the app now shows into the confirmation box and click Confirm.
  5. The page shows Two-factor authentication enabled and a list of recovery codes. Save these somewhere safe. Each works exactly once if you lose access to your authenticator app, and you will not see them again. Use Copy to put them on the clipboard, then click Done.

Afterwards the Security page shows Enabled and how many recovery codes remain.

#Turning it off

  1. On the Security page click Disable two-factor.
  2. Enter your Current password and an Authenticator code or recovery code, then click Disable.