Signing in and security

Turning on two-step verification

Add a code from an app on your phone to your sign-in, so a stolen password is not enough to get in.

Two-step verification, also called two-factor authentication, adds a second check when you sign in. After your password, you enter a six-digit code from an app on your phone. The code changes every 30 seconds. Even if someone learns your password, they cannot sign in without your phone.

Before you start

Install a free authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or Authy.

Turn it on

1. Open Settings and choose the Security tab.
2. Next to Two-Factor Authentication, press Enable.
3. Open your authenticator app and scan the QR code on the screen. If you cannot scan it, type the Manual entry key into the app instead.
4. Type the six-digit code from the app into Verification Code.
5. Press Verify & Enable.
6. You now see Your Backup Codes. Save them somewhere safe, for example written on paper at home. Then press I've Saved My Codes.

Backup codes

Each backup code works once. If you lose your phone, press Use backup code instead when you sign in, and enter one of them. You can make a new set of codes under Recovery codes on the Security tab.

Turning it off

Press Disable, enter your password, then press Disable 2FA. Some accounts, such as administrator accounts, must keep it turned on.

Lost your phone and your backup codes? Contact your community's coordinator to get back into your account.

More guides in this topic

• How do I sign in?
• I forgot my password
• How do I change my password?
• Can I change my email address?
• Signing in with a passkey
• What if someone else has got into my account?

Still need help?

If you can't find what you need, get in touch and a person will help you.