Turn on two-factor authentication
Security and privacy · Protecting your account · 4 min read · updated 14 Sep 2026
Two-factor means a stolen password is not enough to get into your account. It takes two minutes to set up.
Step by step
- Open Security → Two-factor authentication.
- Choose an authenticator app, the safer option, or email codes.
- Scan the QR code with your authenticator app and enter the six digit code it shows.
- Save the ten recovery codes somewhere safe and offline. Each one works once.
- Confirm. From now on you are asked for a code after your password.
Worth knowingIf you are the owner of a business, turn this on today. Most account takeovers we see start with a reused password.
Common questions
I lost my phone and my codes
Raise an issue and choose Account recovery. We verify your identity with your documents, which takes up to three working days.
Can I require it for my whole team?
Yes, from the business Privacy page. Members are asked to set it up the next time they sign in.
Was this article helpful?
Your answer tells us which guides to rewrite first.