Main Changes

Accounts that log in with an email address and password can now set up two-factor authentication. Once it is on, you'll be asked for a 6-digit verification code from an authenticator app (such as Google Authenticator) in addition to your password when logging in. This helps prevent unauthorized logins even if a third party learns your password.

What's Changed

• Set up or turn off two-factor authentication from Account Settings > "Login Settings". Scan the QR code with your authenticator app and enter the verification code it shows to complete setup.
• When setup is complete, one backup code is issued for when you can't use your authenticator app. The backup code is shown only once when it is issued, so keep it in a safe place.
• If you can't use your authenticator app, enter your backup code on the login screen to turn off two-factor authentication and log in. The code stops working once used, so set up two-factor authentication again after logging in.
• You can regenerate your backup code from "Login Settings". Regenerating invalidates your previous code.
• We'll email you when two-factor authentication is set up or turned off, and when your backup code is regenerated or used. If you didn't set it up yourself, you can undo it from the link in the email.
• If you log in only with a Google, Microsoft or Apple account, this setting isn't shown. Please use the two-step verification of each service.