Go to Settings, select the Security tab, and click Enable 2FA. A QR code will appear on screen. Scan it with an authenticator app on your phone.
Supported Authenticator Apps
We use TOTP (time-based one-time passwords), which is compatible with:
Google Authenticator — available on iOS and Android
Authy — supports cloud backup and multi-device sync
1Password — built-in authenticator if you already use it for passwords
Microsoft Authenticator — works with TOTP codes
Any other TOTP-compatible authenticator app
After Enabling
Once 2FA is active, every sign-in will require both your password and a 6-digit code from your authenticator app. The code refreshes every 30 seconds. You will also receive backup codes — a set of one-time codes you can use if you lose access to your authenticator app. Store these somewhere safe.
Disabling 2FA
Go to Settings → Security → Disable 2FA. You will need to enter a current 2FA code to confirm the change.
Important If you lose your phone and your backup codes, contact support with your account email. Recovery requires identity verification and may take 1-2 business days.