Two-factor authentication (2FA) adds an extra layer of security to your account. Instead of relying only on your password, 2FA requires a verification code from an authenticator app when you sign in.
This helps protect your account if your password is compromised. We recommend enabling 2FA for any account that has access to sensitive business, financial, or customer data.
When you enable 2FA, you will also receive recovery codes. These codes can help you regain access if you lose access to your authenticator app or phone.
Prerequisites
Before setting up 2FA, make sure you have:
- An active account and access to Settings
- Your account password
- An authenticator app installed on your phone, such as Google Authenticator or Microsoft Authenticator
- A secure place to store your recovery codes
Important: Never share your recovery codes or authentication codes with anyone.
Set Up 2FA
1. Open Security settings
Sign in to your account, click your profile name in the top-left corner, and go to Security.
2. Enable 2FA
Find Two-factor authentication and toggle the switch to set 2FA.
3. Connect your authenticator app
Open your authenticator app and add a new account. Scan the QR code displayed on the screen.
If you cannot scan the QR code, use the setup key to add the account manually.
4. Verify the setup
Your authenticator app will generate a temporary verification code. Enter the current code in the setup window and select Verify.
Once the code is accepted, 2FA is enabled for your account.
5. Save your recovery codes
You will receive a set of recovery codes after enabling 2FA. Save the recovery codes somewhere secure, such as a password manager.
Recovery codes are usually single-use, so keep track of which ones you have used.
Troubleshooting
My verification code doesn't work.
Make sure you are using the code for the correct account. If it has nearly expired, wait for the next code and try again. Also check that your phone's date and time are set automatically.
I lost my phone.
Use one of your recovery codes to sign in, then update your 2FA settings. If you don't have a recovery code, contact your administrator or our support team.
I deleted the account from my authenticator app.
Use a recovery code to sign in and set up 2FA again. If you don't have one, contact your administrator or our support team.
Tips and Common Mistakes
- Save recovery codes immediately. Don't wait until you need them.
- Use a password manager rather than an unsecured note or screenshot to store recovery codes.
- Don't share authentication codes. Legitimate support staff should not need your current 2FA code.
- Keep your phone's time synchronized. Incorrect device time can cause valid codes to be rejected.
- When changing phones, make sure 2FA works on the new device before removing it from your old one.
- Replace old recovery codes if you generate a new set.
Best practice: Set up 2FA and save your recovery codes before you need them. This gives your account an additional layer of protection and helps prevent lockouts.