Turn on two-step verification
Once it is on, your password is no longer enough: at every sign-in a six-digit code is sent to your account address, and you have to enter it to get in. Someone who learned your password would get nowhere without your mailbox.
Steps
- Open the Account tab, then Security.
- Click Turn on in the Two-step verification card.
- That is all: nothing to install, nothing to scan. It applies from your next sign-in.
What you will see when signing in
After your password, a screen asks for the code. It is valid for fifteen minutes and works once. Send a new code issues another one if the first never arrives — do check your spam folder.
Devices you chose to remember
If you tick "Remember me" when signing in, that device is not asked for a code again: it was already approved once, code included. The Remembered devices card forgets them all at once, and the code becomes necessary everywhere again.
Turning it off also asks for a code
Turning the verification off removes the protection, so the Turn off button sends a code to your address and waits for you to enter it. Until it is confirmed, nothing changes. That is what stops someone who finds your session open — an unlocked computer — from removing it in one click.
If you lose access to your mailbox
That is the thing to weigh before turning it on: the code goes to your account address, and only there. If you can no longer read it, write to support from the contact form — we can turn the verification off once we have checked it is really you.