Help/Team, plan & your data/Two-factor sign-in and recovery codes
Two-factor sign-in and recovery codes
Two-factor adds a second lock to your sign-in: after the emailed code, six digits from an authenticator app on your phone. Someone who gets into your email still can't get in. It's optional for everyone.
Owners are asked to set it up the first time they open payment keys (Settings, then Payments), Domain, Custom code or Team, with a screen headed One more lock for this. Changes there check for it too.
3 minutesWorks on a phone
Open Your account
On a computer, choose your name at the bottom of the sidebar. On a phone, tap More, then Your account. Under Signing in, find A code from an app on your phone and tap Set it up.
Open an authenticator app
Google Authenticator, Microsoft Authenticator, 1Password or similar, on your phone.
Scan the code
Scan the QR code with the app. Can't scan it? Type the key shown under it instead. On the same phone, tap On this phone? Open it in my app.
Turn it on
Type the six digits your app shows and tap Turn it on.
Save your recovery codes
You get ten recovery codes, shown once. Tap Copy them or Download and keep them somewhere safe that isn't your phone. Then tap I've saved them.
Sign in with it
From now on, after the emailed code you'll see One more code. Type the six digits from your app. No phone to hand? Tap Use a recovery code instead. Each one works once.
Questions
I'm running low on recovery codes.
Your account shows how many you have left. Tap New recovery codes and type the code from your app. Ten new ones replace the old ones, which stop working.
Can I turn it off?
Yes. In Your account, tap Turn it off and type the code from your app. Signing in goes back to the emailed code. If you're an Owner, you'll be asked to set it up again the next time you open payments, the domain, custom code or the team.
I lost my phone and my recovery codes.
Ask an Owner of your site. On Team, they tap Reset two-factor beside you, then Reset it. You're signed out everywhere and can set it up again. Owners can't reset their own, so ask another Owner, or ask us.
It says Too many tries.
After five wrong codes there's a short wait before you can try again. It grows if it keeps happening.
Was this helpful?