Turn on two-factor login
Two-factor login asks for a 6-digit code from your phone after your password, so a stolen password alone can’t get into your account. The website and database consoles need it.
What you need
An authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator, Authy or 1Password. They’re free.
Turn it on
- Click your name at the top right and choose My Account, then find Two-Factor Login and click Set up two-factor login.
- We ask for your password first (Confirm it’s you). Enter it and click Confirm.
- In your authenticator app, add an account and scan the QR code. If you can’t scan, type the Setup key shown next to it instead.
- Enter the 6-digit code the app shows and click Turn on.
- Save your recovery codes (below) before you leave the page.



Save your recovery codes
When it’s on, you get 10 recovery codes. Each one works once, in place of a code from your phone. Click Copy all and keep them somewhere safe, such as your password manager. They’re only shown this once.

Signing in from now on
After your password, enter the code your app shows. Tick Trust this device for 30 days on your own computer so it doesn’t ask every time.

New phone, lost phone
- Lost your phone? On the sign-in step, click Use a recovery code and enter one of your saved codes. Then set up two-factor login again on your new phone.
- Running low on recovery codes? The card shows how many are left. Click New recovery codes to make a fresh set; the old ones stop working.
- New phone, old one still working? Click Turn off on the card, then set it up again with the new phone.
- Lost your phone and your recovery codes? Contact us and we’ll check it’s you and reset two-factor login.

Related guides
Still stuck? Open a support ticket and we’ll help.
