Securing Your Account (2FA & Backup Codes)

Two-factor authentication (2FA) adds a second step to login using an authenticator app.

Enabling 2FA

From your Profile page, start enrollment — you'll get a QR code to scan with any TOTP authenticator app, then confirm with the 6-digit code it generates. Once confirmed, 2FA is active and you'll also receive 10 backup codes.

Backup codes

Backup codes let you log in if you lose access to your authenticator app. Each code works once. You can regenerate a fresh set of 10 at any time from your Profile — this immediately invalidates any old unused codes.

Trusted devices

When logging in with 2FA, tick "remember this device" to skip the 2FA challenge on that device for 7 days. Trusted devices are listed on your Profile page and can be revoked individually, or all at once, at any time.

Disabling 2FA

Disabling 2FA requires re-entering your password, and immediately deletes all backup codes and trusted devices as a precaution.