Two-step verification

Two-step verification asks for a code from an authenticator app after your password. It protects your account if your password is ever found out.

Set up an authenticator app

To turn on two-step verification, follow these steps:

1. Go to Security.
2. In the Two-step verification section, next to Authenticator app, click Set up.
3. Scan the code with your authenticator app, or enter the Setup key by hand.
4. In the Code from your app field, enter the code that the app shows.
5. Click Turn on.

The page then shows 10 recovery codes. Save them before you continue.

Each code is a six-digit number that changes every 30 seconds. A code that was already used to sign in doesn't work a second time.

Sign in with a code

When two-step verification is on, the Two-step verification page appears after your password. Enter the code from your app and click Verify.

On that page you can also do the following:

• To use a saved recovery code, click Use a recovery code instead.
• To use a passkey as the second step, click Use a passkey.

After 10 wrong codes in 15 minutes, the second step is blocked for 15 minutes.

Turn off two-step verification

To turn it off, follow these steps:

1. Go to Security.
2. Next to Authenticator app, click Turn off.
3. Enter your current password.
4. Click Turn off.

Your recovery codes are removed with it. Your account is then protected by your password alone, unless you have a passkey.

A passkey is also a second step

An account that has a passkey asks for a second step at sign-in even when no authenticator app is set up. For more information, see Passkeys.