Two-step sign-in

Add a code from an authenticator app, so a stolen email alone can't open your account.

Open Settings → Sign-in and security → Turn on two-step sign-in.

1. Open an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password and others) and add an account.
2. Scan the QR code, or type the key shown under it.
3. Enter the 6-digit code the app shows. Two-step sign-in is now on.
4. Save your 10 backup codes somewhere safe. Each one signs you in once if you lose your phone.

From then on, after your email code we also ask for a code from the app. Businesses with a team need it on for everyone.

Under Signed-in devices you can see where you're signed in and sign any device out, or all of them except this one.

Tip: Lost your phone and your backup codes? Contact support from your sign-up email address. We check it's you before turning two-step sign-in off.