How does two-factor authentication work?

Two-factor authentication means you need something besides your password to get in.

When you sign in with an email code

The code we email you already proves you hold your inbox. If you've added an authenticator app, we'll also ask for the code from the app.

When you sign in with a password

If your account has a password, two-factor by email is on by default: after your password, we email you a code to enter as well.

Turn email two-factor on or off

1. Open More, then Security.
2. Use the switch next to Two-factor authentication (email OTP). It saves straight away.

We recommend leaving it on.

Add an authenticator app

An authenticator app gives you 6-digit codes on your phone.

1. Open More, then Security.
2. Under Authenticator app, select Set up authenticator app.
3. Scan the QR code with your app, or add the setup key by hand.
4. Enter the 6-digit code from the app and select Verify & enable.
5. Save your backup codes. Each one works once, and they won't be shown again.

Setting up an authenticator app also switches email two-factor on.

Remove an authenticator app

1. Open More, then Security.
2. Select Remove authenticator app.
3. Enter a current code from the app, or select Use password instead and enter your password.
4. Select Remove.

Problems with codes? See Two-step verification troubleshooting.