Turn on two-factor
A six-digit code from your phone as well as your password, and recovery codes for when the phone is lost.
Two-factor asks for a code from an authenticator app each time you sign in, so a stolen password isn't enough. Any app that reads a QR code works, such as the one in your password manager. It applies to Discord and Google sign-ins too.
1. Start it#
Open Your account from the menu with your name, at the foot of the side menu.
- 1Turn on Starts two-factor. Nothing is switched on until the app proves it works.
2. Scan the code#
- 1Open in your authenticator app On a phone already? This opens the app with the code filled in.
- 2Six-digit code from the app Type what the app shows now.
- 3Turn it on Checks the code and switches two-factor on.
The code to scan is shown once, so scan it before you leave the page.
3. Save your recovery codes#
Each code signs you in once if your phone is lost. Keep them somewhere that isn't the phone. They're only shown this once.
- 1Copy all Copies all ten codes, ready to paste into your password manager.
- 2Download .txt Saves the codes as a text file.
- 3I have saved these Closes the codes. They can't be shown again.
Signing in with it on#
After your password:
- 1Code from your app, or a recovery code Six digits from the app, or one recovery code.
- 2Verify Signs you in. You have five minutes.
- 3Start over Back to the sign-in page.
New codes, or turning it off#
- 1Manage… Opens the forms for new recovery codes and for turning two-factor off.
- New recovery codes: type a code from the app (not a recovery code) and press Make new recovery codes. The old set stops working.
- Turn it off: type a code from the app or a recovery code and press Turn off two-factor. Asking for a code means nobody at an unattended screen can remove it.
Still stuck? Open a ticket and say which guide you followed.