Setting up two-factor authentication

Two-factor authentication (2FA) adds a second step after your password — a six-digit code from an authenticator app on your phone.

Apps that work

Any TOTP app — 1Password, Bitwarden, Google Authenticator, Authy, Microsoft Authenticator, or your password manager.

Enable it

1. Open Profile → Security.
2. Click Enable two-factor authentication.
3. Scan the QR code with your authenticator app.
4. Enter the 6-digit code your app shows you to confirm.
5. Save your recovery codes somewhere safe — they're your only way back in if you lose your phone.

Sign-in flow after enabling

Future sign-ins will prompt you for a 6-digit code right after your password. The code rotates every 30 seconds.

If you lose your phone

Use a recovery code on the 2FA screen. If you've also lost your recovery codes, contact support — we can disable 2FA after verifying your identity.