Two-factor authentication (2FA) adds a second lock to your account. Besides your password, logging in also requires a 6-digit code that changes every 30 seconds and that only you can see on your phone. Even if someone learns your password, they can't get in. Since your account controls services, domains and payments, we recommend it for everyone.

What you need

An authenticator app on your phone, e.g. Google Authenticator, Microsoft Authenticator, Authy or the password manager you already use (1Password, Bitwarden etc.). SMS and email codes aren't supported.

Setting it up

1. Go to Account → Security.
2. In the Two-factor authentication (2FA) card, click Enable.
3. Step 1: open the app on your phone, tap "+" and scan the QR code shown. If you can't scan it, type the key shown below the QR into the app. In the app it will appear as "Magic Streams" with your email.
4. Step 2: enter the 6-digit code the app shows now and click Confirm & enable.
5. 8 one-time backup codes appear (format XXXX-XXXX). Click Copy codes and keep them somewhere safe, not on the same phone: print them or store them in your password manager. They're shown only this once.

The card now shows Enabled and how many backup codes are available.

If you see "Wrong verification code — try again", the message appears in the card above (Change Password). Wait for the code in the app to change and try again. If the error persists, check that your phone's time is set automatically.

Logging in with 2FA

1. Enter your email and password as usual.
2. On the Two-factor verification page, enter the 6-digit code from the app and click Verify.
3. If you tick Don't ask again on this device for 30 days, that browser is trusted and you won't be asked for a code for 30 days. Don't tick it on a shared computer.

You have 10 minutes to enter the code and up to 5 attempts. After that you go back to the login page. Many mistakes in a short time lock logins temporarily for 30 minutes.

New backup codes

If you've used several, or fear someone has seen them:

1. Security → New backup codes.
2. Enter your account password and confirm.
3. Keep the 8 new codes. The old ones stop working.

I changed or lost my phone

If you have backup codes

1. At login, in the same field as the 6-digit code, enter a backup code (e.g. AB7K-9QXM; capitals and the dash don't matter). Each backup code works once.
2. Go to Security and click Disable (with your account password).
3. Click Enable again and scan the new QR code with your new phone.

If you're simply changing phones and still have the old one, many apps (Google Authenticator, Microsoft Authenticator, Authy) can transfer accounts to the new one. Otherwise do steps 2-3 before you hand over the old phone.

If you don't have backup codes

Send us a message from the Contact Us page, from your account's email address. For your security, we'll confirm your identity before switching off 2FA. This can take a little time, so keep your backup codes safe from the start.

Switching it off

1. Security → Disable.
2. Enter your password and confirm.
3. You'll see "Two-factor authentication has been disabled". All "trusted devices" are revoked.

Good to know

• 2FA belongs to your login email. If you can access several accounts, it protects all of them.
• Every user you invite sets up their own 2FA, from their own Security page.
• A password reset doesn't switch off 2FA.
• If you log in with Google, Facebook or X, the login happens without 2FA. Security then depends on your account there, so switch on 2FA there too.