Turn on two-step sign-in

1. Open Settings, then Security.
2. Press Turn on two-step sign-in and scan the QR code with an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password and others).
3. Enter the 6-digit code it shows.
4. Save the ten backup codes somewhere other than your phone.

From then on, signing in asks for the code after your password. It's especially worth turning on if you send certificates: nobody can issue in your name with your password alone.

Lost your phone?

On the code screen, choose Use a backup code. Each code works once, and using one removes the old authenticator so you can set up a new one. Lost the codes too? Contact us from your account's email address.