Turn on two-step login

Two-step login asks for a code from your phone as well as your password, so nobody can get in with your password alone.

You need an authenticator app such as Google Authenticator or Microsoft Authenticator.

1. Start the setup

1. In the portal, click your name at the top, then Profile.
2. In Two-step verification, click Set up two-step verification.

2. Scan the QR code

1. Open your authenticator app and add a new account.
2. Scan the QR code on the screen. Can't scan? Type the key shown under Can't scan? Enter this key instead.
3. Type the 6-digit code the app shows into 6-digit code and click Turn on.

3. Save your recovery codes

You now see a list of recovery codes. Each one works once if you lose your phone.

1. Click Copy codes and keep them somewhere safe, such as a password manager.
2. Click I've saved them.

4. New codes or turning it off

On the same card, New recovery codes makes a fresh set (the old ones stop working) and Turn off switches two-step login off. Both ask for your portal password first.