Two-factor sign-in

Two-factor sign-in asks for a code from an authenticator app on your phone as well as your password, so a stolen password isn't enough to get in.

You can use any authenticator app, such as Google Authenticator, Microsoft Authenticator or 1Password. SMS codes and passkeys aren't supported.

Turn it on for yourself

1. Click your name and open Your account.
2. Under Two-factor sign-in, click Set up two-factor sign-in.
3. In your authenticator app, add an account and scan the QR code. If it won't scan, type the key shown under Can't scan it? into the app.
4. Enter the 6-digit code the app shows in Code from the app and click Turn on.
5. Save your 10 recovery codes with Copy or Download. Each one lets you sign in once if you lose your phone, and they won't be shown again.
6. Tick I've saved my recovery codes and click Done.

From now on, after your password you'll be asked for the code from the app.

Get new recovery codes

On Your account, enter the code from your app and click Make new codes. Your old recovery codes stop working.

Turn it off

On Your account, enter your password and a code from your app (or a recovery code), then click Turn off two-factor sign-in. You can't turn it off if your business requires it.

Require it for your whole team

1. Turn it on for yourself first.
2. Go to Settings → Security and data.
3. Under Sign-in, tick Require two-factor sign-in for everyone and confirm with Require it.

People who haven't set it up are asked to do so the next time they sign in, before they can do anything else.

When someone loses their phone

If a team member has lost their phone and their recovery codes, someone who manages the team can open Settings → Team and click Reset 2FA next to them. They then sign in with their password and set up their app again. Only an owner can reset an owner's two-factor, and you can't reset your own.