Turn on two-step log-in

With two-step log-in, someone who gets into your inbox or learns your password still can't log in as you without your phone.

1. 1

   Open account settings

   Find Two-step log-in and press Set up.

   Open account settings
2. 2

   Scan the QR code

   With an authenticator app such as Google Authenticator, Microsoft Authenticator, 1Password or Authy. If you can't scan it, type the key shown under it.

3. 3

   Type the code the app shows

   Six digits. A new one appears every 30 seconds.

4. 4

   Save your recovery codes

   Ten codes, shown once. Keep them in a password manager or print them. Each lets you in once if you lose your phone.

#When it's required

• A workspace's owner can require it for owners and admins, in the workspace's settings. Owners and admins who haven't set it up are asked to before they can open the workspace.
• Editors and client reviewers are never required to use it, but anyone can turn it on.

#If you lose your phone

• Log in with a recovery code in place of the code from the app, then set it up again on your new phone.
• Out of recovery codes? Contact us from your account's email address. Once we're sure it's you, we turn it off so you can set it up again.