Setting up two-factor authentication

Two-factor authentication adds a second check beyond your password, so a leaked password alone isn't enough to access your account.

Enabling 2FA

1. 1Open Settings and find the Two-factor authentication section.
2. 2Click Enable 2FA — a QR code and a manual entry code both appear.
3. 3Scan the QR code with an authenticator app (Google Authenticator, Authy, or any standard TOTP app).
4. 4Enter the 6-digit code your app generates and click Activate 2FA.

The QR code is generated entirely in your browser — your secret key is never sent to any third party during setup.

What changes at sign-in

Once enabled, entering your email and password is no longer enough on its own. You'll be prompted for a 6-digit code from your authenticator app before you're signed in — this happens on every login, not just the first one.

Disabling 2FA

From the same Settings section, confirm your current password to disable it. We ask for your password again here specifically so that having someone else's session open on your machine isn't enough to turn 2FA off.