Account and security

Turn on two-factor authentication (2FA)

Add a second sign-in step using an authenticator app, and save your recovery codes so you can never be locked out.

  • 2 min read
  • intermediate
  • Checked 5 October 2026

Before you start

  • You have an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or Authy

Steps

  1. Click Settings (1), then Login & security (2).

    The Settings page with Settings in the sidebar and Login & security in the Settings menu marked 1 and 2

  2. In the Two-factor authentication card (3) click Set up (4).

    The Two-factor authentication card with Settings, Login & security, the card heading and Set up marked 1 to 4

  3. A QR code appears. Open your authenticator app, choose to add an account, and scan the code. If you cannot scan it, type the setup key shown under the code ("Can't scan? Enter this key instead").

  4. Your app now shows a 6-digit code that changes every 30 seconds. Type the current code into the box and click Verify.

  5. Responseify shows your recovery codes: "Save these now. They are shown once." Use the copy or download button, keep them somewhere safe such as a password manager, and tick that you have saved them before you click Done. Each code works once if you lose your phone.

  6. You will see "Two-factor authentication enabled". From now on, signing in asks for your password and a code from your app.

What next

Owners can make 2FA mandatory for everyone on the team, using the card below the one you just used.

The Require two-factor for the whole team card, marked 3 and 4, on the Login and security page

Frequently asked questions

Can I get new recovery codes?

Yes. Use Regenerate recovery codes on the same card. The old ones stop working.

Can I turn 2FA off?

Yes, using Turn off on the same card. We recommend keeping it on.

Was this article helpful?

Related articles

Still stuck? Email [email protected] — include the page you were on and what you saw.