Two-step verification

It is turned on once, when creating the account. The activation screen appears on its own when confirming a new account or when signing in with an account that does not have it yet. You need an authenticator app, such as Google Authenticator, 1Password or Authy.

1. 11. Open your authenticator app and choose to add an account.
2. 22. Scan the QR code on the screen.
3. 33. Type in App code the 6 digits the app shows.
4. 44. Click Turn on verification.

The screen shows 10 recovery codes. Each one lets you in once if you do not have your phone. That is the only screen where you see them. Click Download or Copy and keep them off your phone, in a password manager or on paper in a safe place.

When you have few left, the panel's Home warns you. Click Generate codes to have 10 new ones.

Before wiping the old phone, open Security in settings and click Change device. You confirm with your password and the old phone's code and scan a new code with the new one.

If you no longer have the old phone, sign in with a recovery code and click I no longer have the device. Turn on two-step verification explains it.

Set your phone's time to automatic. Codes depend on the exact time and a phone with the wrong time generates codes that do not work.

Each person on your team turns on their own verification with their own phone. Nobody shares codes. If someone on your team loses access, they should follow I cannot sign in to my account.

Your account is protected. In the last chapter you check the open sessions and the activity.