Use the account menu at the bottom of the sidebar for your personal profile and security settings. Keep authentication details and recovery codes private.
Set up two-factor authentication
-
Open Account security.
-
Complete the requested account verification, then choose Start setup.
-
Add the account to an authenticator app by scanning the QR code or entering the setup key.
-
Enter the six-digit code and choose Verify and turn on.
-
Store your recovery codes somewhere safe.
Once enabled, two-factor authentication is required after password or connected-provider sign-in. The setup screen expires, so restart setup if it is no longer valid.
Use recovery codes carefully
A recovery code can be used once when you cannot use your authenticator. Generating new recovery codes replaces all old codes and signs out other sessions. Do not include codes or authenticator QR images in support requests or screenshots.
Lost access to another device?
From Account security, use Sign out other sessions and complete the confirmation. The current browser stays signed in; other browsers and remembered devices must sign in again.
Password and connected sign-in
Use Forgot password? on the sign-in page for the email/password recovery flow. Use the connected-provider buttons only when they are available for your account. Keep at least one usable sign-in method before disconnecting another.
Only choose Keep me signed in on this device on a private device. If an invitation is waiting after email confirmation, reopen the original invitation and sign in with the invited email address.