A password can be guessed or leaked. Two-factor authentication asks for a second code from your phone, so a stolen password alone is not enough. It takes two minutes.
Switch it on
- Open Security Settings from the account menu and choose Two-Factor Authentication.
- Scan the code with an authenticator app such as Google Authenticator, Authy or 1Password.
- Enter the six-digit code the app shows to confirm, and save the backup code somewhere safe.
Signing in afterwards
After your password you will be asked for the current code from the app. The backup code signs you in once if you lose the phone; a new one is issued each time it is used.
We will never ask you for a two-factor code or your password by email or in a ticket. Anyone who does is not us.
Lost your device?
Use the backup code to sign in, then set two-factor up again on the new device. If you have neither, open a ticket from the email address on the account and we will verify your identity before resetting it.