Account and security

Password and two-step sign-in

Add an optional password, and protect your sign-in with codes from an authenticator app and backup codes.

Open Sign-in and security (Account, Sign-in and security). Everyone on a team has their own settings here.

#Password

• A password is optional: the emailed link always works too.
• Use at least 10 characters, then press Save password.
• Changing your password signs you out on every other device.
• Changing or removing it asks for your current password, unless you signed in within the last 15 minutes.
• To sign in with it, open Sign in with a password on the sign-in page. After too many wrong tries, wait 15 minutes or use the emailed link.

#Turn on two-step sign-in

1. Press Turn on under Two-step sign-in.
2. Scan the code with an authenticator app, like Google Authenticator or 1Password, or type in the key shown under it.
3. Enter the code from the app and press Turn on.
4. Save your backup codes. There are 10, each works once, and they're shown only this one time.

From then on, every sign-in asks for a code, whether you use the emailed link or your password. Codes change every 30 seconds, so use the newest one. If your phone isn't to hand, enter a backup code instead. The page shows how many you have left.

#Turn it off

Enter a current code under Two-step sign-in and press Turn off. We email you when it's turned off (see Security emails).