With two-factor authentication (2FA), logging in needs your password and a six-digit code from an app on your phone. Even if someone learns your password, they cannot get in without your phone.
Turn it on
- Install an authenticator app, such as Google Authenticator or Microsoft Authenticator.
- Open the security section of your account and choose two-factor authentication.
- Scan the QR code with the app, or type the key shown.
- Enter the six-digit code from the app to confirm.
- Save the recovery codes somewhere safe, not only on the same phone.
Recovery codes
If you lose your phone, a recovery code lets you log in once. Each code works a single time. If you have used most of them, generate a new set from the same page.
Turning it off or changing phone
You can turn 2FA off from the security section after confirming your password. When you change phones, set up the authenticator on the new phone before you erase the old one.
We strongly recommend 2FA for business stores, staff and anyone with paid packages.