Enabling two-factor authentication
Add a sign-in code and keep your recovery codes safe.
In one sentence
Two-factor authentication adds a temporary code when you sign in. Store the recovery codes offline so you can sign in if you lose your phone.
How to enable it
- Settings > Security
In Settings > Security, click "Enable 2FA".
- Scan the QR code
Scan the QR code with your authenticator app, or enter the secret key manually.
- Confirm with "Verify & Enable"
Enter the 6-digit code from your app in the "Verification code" field, then click "Verify & Enable".
- Download your recovery codes
The codes are shown only once. Click "Download Codes", store the file offline, then click "Confirm".
The XXXX-XXXX codes replace your phone code at sign-in. The rk1_ key recovers your notes after a password reset. Keep both.
If you lose your phone
At sign-in, click "Use a recovery code". Enter a saved XXXX-XXXX code, then click "Verify".
Without your phone or any remaining recovery codes, you cannot get past two-factor authentication. Regenerate the codes before they run out.
Regenerating codes or disabling 2FA
In Settings > Security, check how many codes remain. "Regenerate codes" replaces the old set, which you need to download again. "Disable 2FA" removes this protection. Both actions require a code from your authenticator app.