Two-factor authentication adds a second check at sign-in: even if your password leaks, your account, domains and servers stay protected.
Enable 2FA
Open the Security section
In “My account”, go to “Security”, “Two-factor authentication (2FA)” block.
Choose the method
“App (QR code)”, recommended, works with Google Authenticator, Authy or 1Password; “Email code” sends a 6-digit code at each sign-in.
Confirm your password
Enter your “Current password”, then click “Continue”.
Validate the code
Scan the QR code with your app (or open the email you received), enter the “Verification code”, then click “Activate”.
Keep your recovery codes
Click “Copy the codes”, store them somewhere safe, then click “I have saved my codes”.
The common pitfall
Recovery codes are displayed only once. Without them, losing your phone can lock you out of your account: keep them somewhere other than on that phone.
If it doesn't work
- The QR code won't scan: type in the key shown under “Can't scan? Enter this key manually:” by hand.
- The code is rejected: check that your phone's time is set automatically.
