Enable 2FA
Open Settings Security Two-factor authentication. Scan the QR code with an authenticator app, then enter the six-digit code to confirm. We recommend enabling 2FA for every Admin.
Backup codes
Download and store backup codes offline. Each code works once. If you lose your phone and codes, an Admin must help recover access through support with identity verification.
New device
Sign in with a backup code or old authenticator, then re-enroll 2FA for the new device. Remove old authenticators from the Security page when you retire a phone.
Disable carefully
Disabling 2FA requires your current password and a valid code. Do not disable it on shared admin accounts without a replacement control (SSO or hardware keys).