Two-factor authentication

Two-factor authentication (2FA) asks for a 6 digit code from an authenticator app every time you sign in, on top of your password. A stolen or guessed password is then not enough to open your account.

Turn it on

1. Open Settings from the account menu, then the Security tab.
2. Switch on Setup 2FA for My Account.
3. Scan the QR code with your authenticator app, or type the setup key into it.
4. Enter the 6 digit code the app shows.
5. Save the recovery codes. They are shown once: copy, download or print them and keep them somewhere safe, such as a password manager.

Sign in with a code

After your password, SocialApp asks for your verification code. Enter the 6 digits from the app; they change every 30 seconds. If you do not have your phone, choose Try Another Way and enter one of your recovery codes. Each recovery code works once.

After too many wrong codes, authenticator codes are locked for a while; a recovery code still works.

A new phone

Setup new Authenticator moves 2FA to a new app. Confirm with your password and a current code or a recovery code, then scan the new QR code. The old app keeps working until the new one is confirmed.

Turn it off

Switch 2FA off and confirm with your password. If your organisation requires 2FA, it cannot be turned off; see enforce two-factor.