Two-factor authentication

Two-factor authentication (2FA) adds a second step to the password: when signing in you enter a one-time code. Even knowing the password, an outsider can't get into the account.

It's set up in Settings → the Security tab → the "Two-factor authentication" block.

1. The two-factor authentication block and its current state.
2. The enable button (with 2FA on, "Change" and "Remove" are here instead).
3. The passkeys block — a separate feature, see Passkeys.

Methods

One method is active at a time. It can be changed at any moment with the "Change" button.

Enabling email or Telegram

1. Click to enable 2FA.
2. Choose the method.
3. A code arrives on the chosen channel — enter it to confirm.

1. Email — the code goes to the account address.
2. Telegram — available only after linking, otherwise a hint is shown.
3. Google Authenticator — the code is generated in the app.

For Telegram, first link the account on the Profile tab. If the bot says the chat wasn't found, open the bot, press Start and try again — it replies that you can now link.

Enabling Google Authenticator

1. Choose "Google Authenticator".
2. Scan the QR code with the app (Google Authenticator, Authy and others) or enter the secret key by hand.
3. Enter the 6-digit code from the app and your current password.

Save the secret key. If the phone is lost and the key isn't written down, access can only be restored through support.

Turning it off

The Remove button in the same block. A code from the active method is required.

Removal turns 2FA off entirely — no method remains, email included. To get the protection back, enable it again and choose the method you want.

If the code doesn't arrive