Setting Up Two-Factor Authentication (2FA)

Secure Your Account with 2FA

Two-factor authentication (2FA) adds an extra layer of security to your account. We highly recommend enabling it to protect your data.

What is Two-Factor Authentication?

2FA requires two forms of verification to log in:

1. Something you know: Your password
2. Something you have: Your phone or security key

Even if someone steals your password, they can't access your account without the second factor.

How to Enable 2FA

Step 1: Access Security Settings

1. Click your profile icon in the top-right corner
2. Select "Account Settings"
3. Navigate to "Security" tab
4. Find "Two-Factor Authentication" section

Step 2: Choose Your 2FA Method

Method 1: Authenticator App (Recommended)

1. Download an authenticator app:
   • Google Authenticator
   • Microsoft Authenticator
   • Authy
   • 1Password
2. Click "Set up authenticator app"
3. Scan the QR code with your authenticator app
4. Enter the 6-digit code from your app
5. Save your backup codes in a secure location

Method 2: SMS Text Message

1. Click "Set up SMS authentication"
2. Enter your mobile phone number
3. Click "Send verification code"
4. Enter the code you receive via text
5. Confirm your phone number

Method 3: Security Key (Most Secure)

1. Purchase a hardware security key (YubiKey, Titan Key, etc.)
2. Click "Set up security key"
3. Insert your security key when prompted
4. Follow the browser prompts to register the key
5. Register a backup key for redundancy

Backup Codes

⚠️ Important: Save Your Backup Codes!

When you enable 2FA, you'll receive backup codes. Store these codes securely:

• Print them and keep in a safe place
• Save to a password manager
• Store in encrypted cloud storage
• Never share them with anyone

You'll need these codes if you lose access to your primary 2FA method.

Using 2FA to Log In

1. Enter your email and password as usual
2. You'll be prompted for your second factor
3. Enter the code from your authenticator app, SMS, or insert your security key
4. Check "Trust this device" to avoid 2FA for 30 days on this device (optional)

Managing 2FA Settings

In Security Settings, you can:

• View active 2FA methods
• Add additional 2FA methods
• Remove 2FA methods
• Generate new backup codes
• View trusted devices
• Revoke device trust

Troubleshooting 2FA

Lost access to authenticator app?

• Use one of your backup codes
• Contact support with account verification

Not receiving SMS codes?

• Check your phone has signal
• Verify your phone number is correct
• Wait a few minutes and try again
• Use an authenticator app instead

Security key not working?

• Try a different USB port
• Update your browser
• Use a backup key
• Contact support if key is damaged

Best Practices

• Use an authenticator app over SMS for better security
• Register multiple 2FA methods as backups
• Keep backup codes secure and accessible
• Review trusted devices regularly
• Update your 2FA settings if you change phones