Setting up two-factor authentication

2FA means a stolen password alone is not enough to access your account.

Use an app, not SMS

SIM swapping — an attacker convincing your network to move your number — defeats SMS codes and is common. An authenticator app cannot be transferred by a phone call.

Setting it up

1. Install an authenticator app.
2. Go to Profile → Security → Two-Factor Authentication.
3. Write the backup code on paper before scanning anything.
4. Scan the QR code with your authenticator app.
5. Enter the generated six digits to confirm.
6. Store the paper backup somewhere safe and private.
7. Turn off SMS 2FA if it is still enabled.

Why paper, not a screenshot

Screenshots sync to the cloud, and cloud accounts get breached — which is exactly the situation 2FA exists to survive.

If a code arrives you did not request

Someone has your password. Do not enter it. Change your password immediately.