Turn on two-factor authentication

With two-factor authentication, your password alone no longer gets anyone in: they also need a 6-digit code from an app on your phone. Even if your password leaks, your account stays protected. Your company can also make it mandatory.

Turn it on

1. Install an authenticator app on your phone: Google Authenticator, Microsoft Authenticator or any compatible one.
2. Under My profile › Account, tab Sign-in and security, in the Two-factor authentication card, enter your password and click Turn it on. The password is asked so that a session left open on another computer can't add its own app. If you only sign in through your company's identity provider, no password is asked.
3. Scan the QR code with the app. If you can't scan it, type in the key shown below the code.
4. Enter the 6-digit code the app shows and click Confirm code.

Recovery codes

As soon as it's on, the client area shows 10 recovery codes, like k7qm-2x9d. Each one signs you in once if you don't have your phone, then it's used up. They're shown only once, so:

1. Copy them (Copy) or download them;
2. Keep them somewhere safe, such as your password manager;
3. Tick I have saved these codes, then Hide the codes.

The card then tells you how many you have left. When you're running low, enter your password and click New recovery codes: the old ones stop working.

Signing in

After your email and password, the client area asks for the code from your app. You can type a recovery code there instead.

Turn it off

Enter your password in the field provided and click Turn it off. Your account is then protected by your password only, and your recovery codes stop working. If your company requires two-factor authentication, you'll have to turn it back on to carry on.

Good to know

• Turning on two-factor authentication signs out your other sessions.
• Lost your phone and out of recovery codes? A colleague who manages the team can use Reset two-factor authentication on your line; otherwise, contact our team. You'll set it up again at your next sign-in.
• New phone: turn two-factor off and back on to scan a fresh QR code, or move your accounts with your app's transfer tool.