Two-factor authentication adds a layer of security: even if someone knows your password, they can't sign in without your phone.
Turn on 2FA
- Go to Profile > Security
- Tap "Turn on two-factor authentication"
- Scan the QR code with an app like Google Authenticator, Authy, or 1Password
- Enter the 6-digit code to confirm
- It's on: the next time you sign in, you'll be asked for this code
Warning
The initial 2FA setup happens on the web (for the QR code). Once it's on, mobile sign-in asks for the code too.
Generate backup codes
Once 2FA is active, generate 8 backup codes:
- Profile > Security > "Generate backup codes"
- 8 codes are shown ONLY ONCE
- Copy them, print them, or store them in your password manager
- If you lose your phone, use one of these codes to sign back in (each code works only once)
Warning
If you close the window without saving the codes, they're lost. You can generate new ones at any time, but the old ones become invalid.
I lost my phone and my codes
Contact us through the About page. For security reasons, recovery requires identity verification and can take 24 to 48 hours.
