How do I set up two-step sign-in?

Two-step sign-in asks for a 6-digit code from an authenticator app after your password, so a stolen password alone isn't enough to get into your account. Turn it on in Settings → Security under Two-step sign-in. It takes about a minute.

Before you start

Install an authenticator app on your phone, such as Google Authenticator, Authy or 1Password.

Turn it on

1. Go to Settings → Security and select Set it up.
2. Scan the QR code with your authenticator app. Can't scan it? Type the key shown under the code into the app instead.
3. Enter the 6-digit code the app shows and select Turn on.
4. You'll see 10 backup codes. Select Copy or Download and keep them somewhere safe. You won't see them again.
5. Check I saved my backup codes and select Done. Sign me in again.
6. Sign in with your email and password, then enter a code from the app.

Signing in with it

After your password, you'll see Two-step sign-in. Open your app, enter the current 6-digit code for offtheave and select Verify. Each code works once.

Backup codes

• Each backup code gets you in once if you don't have your phone. On the code screen, select Lost your phone? Use a backup code.
• Backup codes are 10 characters of capital letters and numbers. Type them exactly as they appear in your saved list.
• Settings → Security shows how many you have left.
• To get a fresh set, select New backup codes, enter a code from your app and select Get new codes. Your old backup codes stop working.

Turn it off

1. In Settings → Security, select Turn off.
2. Enter a code from your authenticator app and select Turn off.
3. You'll be signed out. Your backup codes are deleted.

Limits

• After your password, you have a few minutes to enter the code. If you take too long, you'll see That sign-in has expired. Just sign in again.
• Too many wrong codes pause sign-in for 15 minutes.
• Two-step sign-in applies every way you sign in: with your email and password, with Google or another connected service, and with your wallet. After those, you land on the code screen.

Troubleshooting

• Codes keep failing: use the newest code, and make sure your phone's date and time are set automatically.
• New phone: while you still have the old phone, turn two-step sign-in off, then set it up again on the new phone.
• Lost your phone: sign in with a backup code. Then, in Settings → Security, you can turn two-step sign-in off or get new backup codes by entering another of your backup codes, and set it up again on your new phone.
• No phone and no backup codes: contact us with your username.