Two-factor authentication
Add an authenticator app so sign-in needs a six-digit code as well as your account.
Two-factor authentication (2FA) adds a second step at sign-in: a six-digit code from an authenticator app, so getting in takes something you have as well as something you know.
Turn it on
- 1Open Login and security, then Two-factor authentication.
- 2Tap Set up authenticator. Scan the QR code with an app like 1Password or Google Authenticator, or enter the key by hand.
- 3Type the six-digit code your app shows to turn it on.
After that, sign-in asks for a fresh code. "Trust this device for 30 days" is ticked by default, so that browser skips the code for a month; untick it on a shared computer. Removing your authenticator later takes a current code too, so no one can quietly switch 2FA off.
Changing your password or email address, and setting a new password from a reset link, ask for the 6-digit code as well. That holds on a trusted device too, since trusting it only skipped the code at sign-in.
Related articles
Still need a hand?
A real person reads everything. Tell us what you're stuck on and we'll get back to you.