How do I enable two-factor authentication (2FA)?

Two-factor authentication adds a second verification step at login. After entering your password, you will be asked for a 6-digit code from an authenticator app. Even if someone has your password, they cannot log in without the code.

To set it up, go to the Account page and open the Security section. Click "Enable two-factor authentication". A QR code appears; scan it with an authenticator app such as Google Authenticator, Authy, or 1Password. The app generates a new 6-digit code every 30 seconds.

After scanning, enter the current code from your app to confirm the link is working. Once confirmed, 2FA is active on your account.

At the same time, you are shown 10 single-use recovery codes. Copy and store these somewhere safe; a password manager is ideal. If you lose access to your authenticator device, these codes let you get back into your account. Each code works once only.

From this point, every login will ask for a code after your password. If you switch phones or reinstall your authenticator app, set up the account again by scanning the same QR code, or disable and re-enable 2FA to generate a new one.