Two-factor & account security

Two-factor authentication (2FA) adds a second step to sign-in so a stolen password alone can't get into your account.

Enabling 2FA

1. Open Settings → Security and choose Enable two-factor.
2. Scan the QR code with an authenticator app (any TOTP app works).
3. Enter the 6-digit code to confirm and save your recovery codes somewhere safe.

Recovery codes

Recovery codes let you sign in if you lose your device. Each code works once. Store them in a password manager, not in your inbox.

If you're locked out

Use a recovery code, or contact support from your registered email. For security we can't bypass 2FA without verifying account ownership.