How do I set up two-step sign-in?

Before you start

• A free authenticator app on your phone, such as Google Authenticator or Microsoft Authenticator. Any other authenticator app also works.

Steps

1. Open the set-up page. You can also reach it from the banner "Set up two-step sign-in", or from My account.
2. Read the page, type Your password and tap Start. If you signed in more than 10 minutes ago, we also email a 6-digit code to your current email: type it and tap Start again. (If your site can't send emails yet, you are asked to sign in again first.)
3. In your authenticator app, tap "Add" or "+" and scan the QR code. On a phone, tap On this phone? Open in your authenticator app.
4. Can’t scan? In the app choose "Enter a setup key", name it with your site address and type the key shown. Use Copy to copy it.
5. Tap I added it — next.
6. Type the 6-digit code the app shows. The code changes every 30 seconds, so use the newest one.
7. Tap Turn on two-step sign-in.
8. Save your recovery codes: Download .txt, Print or Copy. Then tap I saved my recovery codes.

Good to know

• Your owner can require two-step sign-in for some roles. Then the page shows "Please set it up by" a date. After that date you must set it up to continue, and you only see Sign out instead of Not now.
• The owner and admin roles are asked to use it by default, with 7 days to set it up. The owner can change this.
• Recovery codes let you in if you lose your phone. Each works once. Keep them in a safe place, such as a password manager.

Common problems

• My code does not work. Codes change every 30 seconds, or the setup timed out. Type the newest code. Or tap Start again with a new QR code.

Questions

Related

• Two-step sign-in
• My account
• Two-step sign-in rules