        HELP
        /
        ACCOUNT
        /
        SET UP TWO-FACTOR AUTHENTICATION
      

Set up two-factor authentication

Two-factor authentication adds a second check at login: a 6-digit code from an authenticator app, on top of your password. This covers turning it on, what changes when you sign in afterwards, and how to turn it off again.

        4 MIN READ
        UPDATED 4 AUG 2026
        DASHBOARD → MY PROFILE → TWO-FACTOR AUTH
      

BEFORE YOU START

You need an authenticator app installed on a phone — Google Authenticator, Authy, or similar. Setup takes about a minute once the app is open and ready to add an account.

What two-factor authentication adds

With it on, a correct password is no longer enough to sign in — you also need a current 6-digit code from your authenticator app. My Profile shows whether it's on or off next to Two-Factor Auth, with a status of Enabled or Not enabled.

Turn it on

Setup happens on its own screen, away from the rest of your profile.

1

From My Profile, open Two-Factor Auth in the sidebar. Until you enable it, the overview page shows a Not enabled badge next to it.

2

Choose Enable Two-Factor Authentication.

3

On the setup screen, install an authenticator app if you don't already have one, then scan the QR code with it, or type in the Manual entry key by hand if scanning isn't possible.

4

Open the entry the app just created and note the 6-digit code it's showing.

5

Enter that code under Enter the 6-digit code to activate and choose Activate 2FA.

Once the code checks out, two-factor authentication is enabled and the status on My Profile changes to Enabled.

screenshot — Two-Factor Auth setup screen with QR code and manual entry key

The setup screen: scan the QR code, or use the manual key underneath it.

GOOD TO KNOW

The secret from the setup screen only lives in your session — nothing is written to your account until you confirm it with a code. Choosing Cancel on the setup screen leaves your account exactly as it was, with two-factor authentication still off.

From now on, a correct password takes you to a separate screen asking for your Authenticator Code instead of straight into the dashboard. Enter the current 6-digit code from your app and choose Verify. Three incorrect codes in a row end that login attempt and send you back to the login screen, so you'll need to enter your email and password again before trying the code once more.

A COMMON MISTAKE

Typing in a code just as it changes. Authenticator codes rotate roughly every 30 seconds, so if you see Invalid or expired code, wait for the app to show a fresh one rather than retrying the same digits.

Turn it off

6

Open My Profile → Two-Factor Auth. With it on, the page shows Enabled and "Your account is protected with an authenticator app."

7

Under Enter authenticator code to disable, enter a current 6-digit code from your app and choose Disable 2FA.

Disabling always asks for a valid code first — there's no way to switch it off from a device that isn't already signed in to your authenticator.

If something isn't working

The setup screen says invalid code

The phone's clock and the server's clock have drifted apart, or the code was typed from the wrong entry in the app. Re-scan the QR code, or re-check the manual key, and try a fresh code.

It says setup session expired

The secret from step 3 only lives for the length of your session. If the setup screen is left open too long before confirming, it's discarded — start again from Two-Factor Auth.

The code has already rotated to a new one. Enter the current code shown in the app, not one copied down earlier.

I get sent back to the login screen after entering a code

Three wrong codes in a row clear that login attempt. Sign in with your email and password again, then enter a fresh code.

Disable 2FA says invalid code and I no longer have the old phone

There's no self-service recovery code for two-factor authentication. Contact support to have it reset on your account.

What next

Two-factor authentication is one part of keeping the account secure. The other is making sure you can always get back in even if you forget your password.

Reset a forgotten password

Update your profile details

Did this help?

Yes