Set up two-factor sign-in
Owners and admins can change translations, publish and manage keys. So we ask for a second step when they sign in: a 6-digit code from an authenticator app on your phone.
If you are an owner or admin and have not set this up, the dashboard sends you to the Security page. The other pages stay closed until you finish.
Before you start#
Install an authenticator app on your phone. The Security page needs JavaScript, because it talks to the account service directly.
Steps#
- On the Security page, enter your password and choose Start setup. The password is asked again so that nobody who borrows your open browser can change this.
- Scan the QR code with your app. If you cannot scan, type the setup key into the app. The key type is time-based with 6 digits.
- Enter the 6-digit code from the app and your password again. Choose Turn on two-factor sign-in.
- The page shows your recovery codes. They are shown only once. Each works one time if you lose your phone. Copy them or download them as a text file, and keep them apart from your password.
- Tick that you have saved the codes, then choose Continue.
Later#
- New recovery codes: on the Security page, enter your password and a code from the app. The old codes stop working.
- Turning it off: editors and viewers can turn it off. Owners and admins cannot, because the role requires it.
If something goes wrong#
Codes are refused when your phone's clock is wrong. Lost your phone? Use a recovery code. See Sign-in and two-factor problems.