Turning on two-factor authentication

Two-factor authentication (2FA) asks for a code from an authenticator app — such as Google Authenticator, 1Password or Authy — each time you sign in with your password. Each person turns it on for their own sign-in.

Turn it on

1. Open Settings > Security and find Two-Factor Authentication.
2. Select Enable 2FA.
3. Scan the QR code with your authenticator app, or type in the secret shown next to it.
4. Enter the 6-digit code from the app and select Verify & enable.
5. Save the recovery codes that appear. They're shown only once. Select Copy codes, store them somewhere safe, then select I've saved them.

From then on, signing in asks for a code from your app.

Recovery codes

Each recovery code works once, in place of an authenticator code, if you lose access to your app.

Turn it off

In Settings > Security, select Disable 2FA, then enter an authenticator or recovery code and your password. If your account signs in through Shopify and has no password, leave the password blank.

When 2FA is on, your Profile page also shows that your account is protected.