How do I turn on two-factor authentication?

Open Settings, then Security. In the How you sign in card, find Two-factor authentication and choose Enable 2FA. You need an authenticator app on your phone.

Scan the QR code that appears with your authenticator app. If you cannot scan it, type the Manual entry key into the app instead. Then enter the 6-digit code the app shows under Verification code and choose Verify & enable.

From then on, each time you sign in we ask for the current code from your app - however you sign in: with your password, a passkey, an email code, or Google, Microsoft or Apple.

To turn it off, go back to the same card and choose Disable 2FA, then Disable to confirm.

Lost your phone? On the screen that asks for your code, choose Lost your phone?, then Email me the link. We email a link to the address you sign in with. Open it and choose Confirm recovery: we sign you out on every device, and 24 hours later we remove your two-step code and email you. After that you sign in with just your password, and you can turn two-factor back on in Settings.

Found your phone in the meantime? Sign in with your code before then and the recovery stops. And if a recovery email arrives that you did not ask for, close the page without pressing anything - nothing changes - and change your password.

Using a passkey too? See how do I sign in with a passkey?