Turn on two-step sign in

Two-step sign in asks for a code after your password, so someone who has your password still cannot get in. The portal calls it two-factor authentication. You can use an authenticator app, email codes, or both.

These steps are for company admins. Employees do not have this setting. A company admin can require an email code for an employee when inviting them, or later on the Security tab of their page in Users.

Use an authenticator app

An authenticator app runs on your phone and shows a 6-digit code that keeps changing. The page suggests Google Authenticator, Authy or 1Password.

1. Click Settings in the sidebar, then Security.
2. Under Two-factor authentication, turn on the Authenticator app switch.
3. Scan the QR code with your app. If scanning fails, copy the Manual setup key into the app.
4. Type the 6-digit code from the app and click Verify and turn on.
5. Save your 10 backup codes with Copy or Download, then click I saved my codes.

Use email codes

1. Click Settings in the sidebar, then Security.
2. Under Two-factor authentication, turn on the Email codes switch.

It saves right away. From your next sign in, we email a 6-digit code to the address shown on that row, which is the email you sign in with.

Use both

If both are on, the sign-in page asks each time: Use authenticator app or Email me a code. This also gives you a way in if you lose your phone.

Two-step sign in also applies when you use Continue with Google.

Turn it off

Turn off the switch and click Turn off to confirm. Turning off the authenticator app also cancels your backup codes. If you turn off both methods, your password alone signs you in.