Two-factor sign-in, sessions and devices
Protect your account with two-factor authentication, see where you are signed in, sign out other devices, and manage trusted browsers.
Turn on two-factor authentication
Two-factor authentication adds a second step at sign-in, so even if someone gets your password, they cannot get in without the code.
- Go to Settings → Security.
- Choose "Authenticator app" (recommended: Google Authenticator, 1Password, Authy or any similar app) or "Email codes".
- For an app: scan the QR code and type the 6-digit code it shows. For email: type the code we send you.
- Click "Enable 2FA".
Warning: Keep your authenticator app on a phone you will still have. If you change phones, set it up again before you reset the old one.
See your sessions
The Sessions card on Settings → Security lists every browser and device where you are signed in, this device first, with when it was last seen and part of the IP address it used (for example "near 203.0.113.x").
- Click "Sign out" next to any session you do not recognize.
- Click "Sign out everywhere else" to sign out every other device at once. You will be asked to confirm it is you.
Trusted devices
The Trusted devices card lists browsers that skip the extra email code when you sign in, and the date each one stays trusted until. Click "Remove" to ask for the code again next time.
Good habits
- Use a password you do not use anywhere else.
- Forgot it? Click "Forgot password?" on the sign-in page.
- Sign out on shared or public computers from your name menu → "Sign out".
- In Settings → Users, owners can turn on "Require two-factor authentication" for each team member.