Two-factor authentication (2FA)

Two-factor authentication (2FA) protects your account even if your password leaks. Once enabled, every login also requires a 6-digit code generated by an authenticator app on your phone.

Setup:
1. Install Google Authenticator (iOS / Android), Authy or 1Password on your phone if you do not have one.
2. In the dashboard, click Account → Two-factor auth → Enable.
3. Scan the QR code with the authenticator app. (Or enter the secret manually if scanning is not possible.)
4. Enter the 6-digit code shown by the app to confirm.
5. SAVE THE BACKUP CODES SHOWN. Each works ONCE if you ever lose your phone. We do not show them again.

Logging in:
After 2FA is enabled, every login asks for the 6-digit code in addition to your password. Authenticator codes refresh every 30 seconds.

Lost your phone?
Use one of the backup codes you saved. If you also lost the codes, open a support ticket from a different device and we will help recover access after identity verification.

Disabling:
Account → Two-factor auth → Disable. Requires either your password OR a current 6-digit code.

Tip: 2FA is one of the highest-value security upgrades you can do: minutes to set up, weeks of grief avoided if your password ever gets phished.