Skip to main content

Two-step sign-in

Two-step sign-in asks for a code from an authenticator app as well as your password.

Turn it on​

  1. Go to Settings → Account and click Turn on next to two-step sign-in.
  2. Scan the QR code with an authenticator app (Google Authenticator, 1Password, Authy or similar). It shows up as User Evaluation.
  3. Enter the Code from the app and click Turn on.
  4. Save your recovery codes. You get 10. If you lose your phone, each one gets you in once. They're shown only this once.

Signing in​

After your password, enter the code from your app. You can tick Trust this device for 30 days to skip the code on that device for 30 days.

Lost your phone? Use a recovery code instead of the app code.

Too many wrong codes in a row lock code entry for 15 minutes.

Manage it​

In Settings → Account:

  • New recovery codes: enter a code from your app to get a fresh set of 10. The old ones stop working.
  • Forget trusted devices: every device has to ask for a code again.
  • Turn off: enter your password to turn two-step sign-in off.

Require it for everyone (admins)​

In Settings → Security, admins can require two-step sign-in for every member. Turn it on for your own account first. Anyone without it is asked to set it up the next time they sign in.

You can also see and sign out your other devices in Settings → Account. Changing your password signs out your other devices.