Two-factor authentication (2FA)

(Account → Security) Add a second layer of protection using an authenticator app.

1. Click Set up authenticator app.
2. Scan the QR code with an app like Google Authenticator, Authy, or Microsoft Authenticator.
3. Enter the 6-digit code to confirm. From then on, you'll enter a fresh code at sign-in.
4. Save your recovery codes — you'll get 10 one-time recovery codes. Store them somewhere safe; they're how you get in if you lose your authenticator.

You can regenerate recovery codes (which invalidates the old ones) or disable 2FA anytime from the same screen.