Account Security

Protect your account with a strong password and two-factor authentication, and keep recovery codes somewhere safe.

Two-Factor Authentication (2FA)

Two-factor authentication adds a second step to login. After entering your password, you also enter a time-based code from an authenticator app — so even if your password is compromised, your account stays protected.

Setting Up 2FA

1. Open Two-Factor Authentication in your account settings and choose to enable it.
2. Scan the QR code with an authenticator app (such as Google Authenticator, Microsoft Authenticator, or Authy).
3. Can't scan? Enter the manual secret key shown on screen into your app instead.
4. Enter the 6-digit code from your app to confirm and switch 2FA on.

Recovery Codes

Recovery codes are single-use backup codes that let you sign in if you lose access to your authenticator app — for example if you change phones.

• Choose Generate recovery codes when you enable 2FA.
• Each code works once. After you use one, it can't be used again.
• Store them somewhere safe and offline — a password manager is ideal.
• Use Regenerate recovery codes to create a fresh set; this invalidates the old ones.

Resetting 2FA

If you need to start over — for instance after switching devices — you can reset two-factor authentication:

• Reset 2FA secret generates a new secret key and QR code so you can re-pair your authenticator app.
• Reset 2FA turns the feature off so you can set it up again from scratch.

You'll be asked to confirm your identity before any reset takes effect.

Password Best Practices