How do I secure my account with two-factor authentication?
2FA through an authenticator app protects sign-in, is required for payouts, and comes with recovery codes.
Two-factor authentication (2FA) adds a one-time code on top of your password. It is the single most effective protection against account theft.
Enabling it
- 1Go to Settings › Security & 2FA
- 2Scan the QR code with an authenticator app: Google Authenticator, Authy, 1Password and others
- 3Enter the 6-digit code to confirm
- 4Save your 8 recovery codes: they are never shown again
Recovery codes
Each code works once and replaces the app code if you lose your phone. Store them somewhere other than that phone. You can regenerate a fresh set at any time from the same page by entering a valid code.
When a code is requested
- When signing in on a new device
- To add a payout method or request a payout — 2FA is mandatory for creators withdrawing earnings
- To change your email or your password
Your active sessions
The same page lists devices signed in to your account, with their last activity. You can sign one out, or all other devices at once: the reflex to have at the slightest doubt.
Lost phone AND lost recovery codes: email [email protected] from the account's email address. Manual verification takes time — which is exactly why the codes belong somewhere else.