This article explains how to set up two-factor authentication for an account that logs in with an email address and password. With two-factor authentication, you'll be asked for a 6-digit verification code from an authenticator app in addition to your password when you log in. This helps prevent unauthorized logins even if someone else learns your password.
Who can use it
It's available for accounts that log in with an email address and password.
If you log in only with Google, Microsoft, or Apple, the setting isn't shown. Please use the 2-step verification provided by that service instead.
What you need
Install an authenticator app on your smartphone or another device. Any app that shows 6-digit codes, such as Google Authenticator or Microsoft Authenticator, will work.
Set up two-factor authentication
1 . Open Account settings > Login Settings.
2 . Under "Two-factor authentication", click "Set up two-factor authentication".
3 . To confirm it's you, enter your current password and click "Next".
4 . Scan the QR code with your authenticator app. If you can't scan it, enter the key shown on the screen into the app manually.
5 . Enter the 6-digit verification code shown in the app and click "Register".
6 . Your backup code is displayed. Use "Copy" or "Save as text" to keep it in a safe place, then click "Done".
From your next login, you'll be asked for a verification code. You'll also receive an email at your registered address letting you know that two-factor authentication was added.
About the backup code
The backup code lets you log in when you can't use your authenticator app, for example if you lose your phone or switch to a new one.
It's in the format "XXXX-XXXX-XXXX-XXXX" and is shown only once, during setup. You can't view it again later.
When you log in with the backup code, two-factor authentication is turned off and the code stops working. Please set up two-factor authentication again after logging in.
Login Settings shows whether your backup code is "issued" or "not issued".
Logging in after setup
1 . On the login screen, enter your email address and password as usual.
2 . When "Enter your verification code" appears, enter the 6-digit code shown in your authenticator app and click "Log in".
Verification codes change periodically. If you see "The verification code is incorrect", enter the latest code shown in the app.
If you can't use your authenticator app (recover with a backup code)
1 . On the login screen, enter your email address and password.
2 . On the "Enter your verification code" screen, click "Use a backup code".
3 . Enter the backup code you saved and click "Recover and log in".
4 . After you log in, two-factor authentication is turned off. Set it up again with the authenticator app on your new device from Login Settings.
If you've also lost your backup code, please contact us via chat support. Even if you can't log in, you can reach us from the chat at the bottom right of the Help Center. We'll turn off two-factor authentication after verifying your identity.
Regenerate your backup code
If you've lost your backup code or think someone else may know it, regenerate it.
1 . In Login Settings, under "Two-factor authentication", click "Regenerate backup code".
2 . Enter your current password and the verification code from your authenticator app, then click "Regenerate".
3 . Save the new backup code in a safe place.
Once you regenerate it, your previous backup code no longer works.
Turn off two-factor authentication
1 . In Login Settings, under "Two-factor authentication", click "Turn off two-factor authentication".
2 . Enter your current password and the verification code from your authenticator app, then click "Turn off".
After turning it off, you won't be asked for a verification code from your next login.
Notification emails
For your security, we send an email to your registered address when you:
Set up two-factor authentication
Turn off two-factor authentication
Recover with a backup code
Regenerate your backup code
If you receive a setup email you don't recognize
Click the link in the email to undo the setup. Your password may be known to someone else, so reset it right away from "Forgot password?" on the login screen.
Note: The setup email has a subject in both Japanese and English, but its body is in Japanese. The link to undo the setup is in the body.
FAQ
Q. I don't see "Two-factor authentication" in Login Settings.
It isn't shown for accounts that log in only with Google, Microsoft, or Apple. It appears when your account has email and password login set up.
Q. Do I need a verification code to change my email address?
Yes. If two-factor authentication is on, you'll need to enter a verification code in addition to your current password when changing your email address.
Q. Can I require two-factor authentication for all team members?
Currently, each member can choose to set it up individually.
Related articles