Two-step sign-in with an authenticator app

Two-step sign-in adds a second check when you sign in: after your password, you enter a 6-digit code from an authenticator app on your phone. Someone who learns your password still cannot get in. You turn it on under Settings › Your profile › Sign-in and security on the website, or More › Security and sign-in in the app.

What you need

An authenticator app on your phone, for example Google Authenticator, Microsoft Authenticator, 1Password or Authy. Any app that makes 6-digit time-based codes works.

Turn it on on the website

1. Open Settings and the Your profile tab (or select your name at the bottom of the sidebar).
2. In Sign-in and security, find Two-step sign-in. It shows Off.
3. Select Turn on two-step sign-in.
4. Scan the QR code with your authenticator app. If you cannot scan it, type in the key shown under "Can't scan? Type in this key:".
5. Type the 6-digit code the app shows and select Turn on.
6. Your recovery codes appear. Save them now: select Download codes, or copy them into a password manager or print them. They are not shown again.

The section now shows On, the date it was turned on and how many recovery codes are left. If you change your mind during setup, select Cancel.

Turn it on in the app

1. Open More › Security and sign-in.
2. Tap Turn on two-step sign-in.
3. Add ProfitClerk to your authenticator app: tap Open my authenticator app if it is on the same phone, or Copy the key and type it into the app on another device.
4. Enter the 6-digit code it shows and tap Turn on.
5. Save the recovery codes with Copy all codes, then tap I have saved them.

Signing in with two-step sign-in

1. Sign in with your email and password, or with Google or Apple, as usual.
2. On Two-step sign-in, enter the 6-digit code from your authenticator app.
3. Select Sign in.

You have a few minutes to enter the code. If it takes too long you see "That took too long. Sign in again."

Recovery codes

You get 8 recovery codes. Each one signs you in once in place of an authenticator code, for when you lose or change your phone.

• To use one: on the code step, select Lost your phone? Use a recovery code, type a code and select Sign in. To go back, select Use a code from the app.
• To see how many are left: look in Sign-in and security (for example "6 recovery codes left").
• To make new ones: enter your current password next to New recovery codes and select it. The old codes stop working straight away.

New phone

Most authenticator apps can move their codes to a new phone. If yours cannot, sign in with a recovery code, turn two-step sign-in off, and turn it on again with the new phone.

Turn it off

On the website, type your current password next to Turn off in the Two-step sign-in section and select Turn off. In the app, tap Turn off and enter your password. Your sign-in history records the change.

Lost your phone and your recovery codes?

Use Contact us and choose Help with my account. Support can reset two-step sign-in after confirming it is really you. You can then sign in with your password alone and should turn it on again with your new phone. Your sign-in history shows "Two-step sign-in reset by support".

See also Sign-ins and sessions to check where your account is signed in.