Turn on two-step verification to protect your account

A code from an authenticator app on your phone together with your password at every sign-in, plus recovery codes for emergencies.

Updated October 23, 2026

Even if someone learns your password, they cannot sign in without your phone.

What you need

An authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or 1Password.

Turn it on

  1. Open Settings → Profile.
  2. In the Two-step verification card press Turn on.
  3. Scan the QR code with the app (or type the key by hand).
  4. Enter the 6-digit code the app shows.
  5. Save your recovery codes somewhere safe (a password manager or a printed sheet). Each code works once.

Signing in afterwards

After your password, you are asked for the code from the app. It changes every 30 seconds.

Lost your phone?

  • Sign in with one of your recovery codes instead of the app code.
  • Then turn two-step verification off and on again with the new phone, or create new recovery codes.
  • No recovery codes? Ask the account owner or an administrator for help, or contact support.

We recommend the owner and everyone with financial permissions always keep it on.

Was this article helpful?

Need more help? Contact support