Open Settings and choose Two-factor authentication. You need an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or 1Password.
Set it up
It takes three steps.
- Confirm your password. This means an open laptop isn't enough to change how your account is protected.
- Scan the code with your authenticator app. The QR code and its secret appear once setup starts.
- Enter the six-digit code your app shows, then save your recovery codes.
Two-factor sign-in switches on only when a code from your app is accepted. Until then, your account signs in as before.
Recovery codes
Recovery codes let you sign in if you lose your phone. They're shown once, when setup completes, so save them somewhere safe, away from your phone.
You can issue a new set at any time. Every unused code from the old set stops working the moment new ones are issued.
If a code isn't accepted
Enter the six digits showing right now. They change every 30 seconds. If your phone's clock is a few minutes out, every code fails: set the phone's time to update automatically.
When your team requires it
A workspace owner can require two-factor sign-in for everyone. If they do, you'll be asked to set it up before you can open that workspace. See Team and roles.
Signing in through your company
If your organisation signs in through its identity provider, see Single sign-on.