How do I turn two-step sign-in on or off, move it to a new phone, or make new recovery codes?

Where: Settings → Team & security → My account (Two-step sign-in section)

Open this page: admin.<your-site>/account#two-step-sign-in (replace <your-site> with your site address)

Steps

1. Open My account and find the Two-step sign-in card. It shows On or Off.
2. To turn it on, tap Set up two-step sign-in. Type Your password and tap Start.
   • If you signed in less than 10 minutes ago, your password is enough.
   • Otherwise you see "We sent a code to r***@…". Open that email (your current email), type the 6-digit code and tap Start again.
   • Then follow Set up two-step sign-in.
3. Got a new phone? Tap Move to a new phone. Type your password and the code your current app shows now. Tap Continue, then scan the new QR code with the new phone. The old app stops working, and you get new recovery codes.
4. To make new recovery codes, tap New recovery codes. Type your password and a 6-digit code from your app, then confirm. Save the New recovery codes.
5. To turn it off, tap Turn off. Type your password and a code from your app. If you see "The password or the code isn't right", one of them is wrong (for your safety we don't say which). Check both and use the next code from your app.

Good to know

• The card shows how many recovery codes are left. At none, it asks you to make new ones.
• New codes replace the old ones. The old ones stop working.
• If your role is required by the owner, the card shows Required for your role and says "Your site owner requires two-step sign-in for your role, so it can’t be turned off."
• Turning it off makes your account easier to break into.
• Why a code to turn it on? Browsers fill in your saved password for anyone using this computer. Without the code, someone could add their own phone to your account.
• Wrong tries add up across turning it on, moving it, turning it off and new codes: after 5 wrong tries in 15 minutes you wait a few minutes.
• A newly added (or moved) app counts as proof for email or password changes only after a day. Until then we email the code.
• If your site can't send emails yet, you are asked to sign in again. Right after signing in, your password is enough.

Common problems

• I can not turn it off. Your role requires two-step sign-in. Ask your site owner to change the rule.
• "The password or the code isn't right." One of them is wrong. For your safety we don't say which. Check both.
• I lost my old phone. You can't move it without the old app. Sign in with a recovery code and ask your site owner for help. The owner can recover access from keynate.com.

Questions

Related

• Set up two-step sign-in
• My account
• Two-step sign-in rules