Set up two-factor authentication

1. Open your profile menu (top right) and choose Security.
2. Click Set up two-factor authentication.
3. Scan the QR code with an authenticator app such as Google Authenticator, 1Password or Authy. If you can't scan it, type in the key shown under it instead.
4. Enter the six-digit code the app shows.
5. Save your ten recovery codes somewhere safe, then click I have saved them.

From then on, every sign-in asks for a code from the app.

Who has to use it

• Owners and admins must set it up. New accounts get a few days' grace, with a reminder banner, before it's enforced.
• An owner can require it of every member. See Require two-factor authentication for everyone.

Lost your phone

At the code prompt, enter one of your recovery codes instead. Each code works once.

Once you're back in, set up the app again. Then get fresh recovery codes from Security → New recovery codes (this needs a current code from the app).