Set up the second way in

Until an app can prove it is you, the record can be read and not changed. This is how you turn that on.

Where it is

/console/account?set=app

Open Account. Under the ways in, the row An app on a phone carries Set it up.
Type your password again. We ask although you are signed in — We ask for it again because a signed-in page is not proof. Only somebody who knows the password can set this up. Then press Show the letters.
You land on Set up the app. Any authenticator app will do. Scan the square, or type the letters underneath it if the app asks for them, then send us the code it shows.
Type what the app shows in The code the app is showing — Six digits. It changes every half minute; if it has just changed, use the new one. Then press Turn it on.

You can stop anywhere before the last step. Nothing is set up yet, and nothing changes if you stop here.
The letters do not last: These letters are good for ten minutes. After that they stop working and this screen starts again.
One app at a time. Setting up another replaces this one, and the app you have now keeps working until you send us a code from the new one.
The app and the emailed code are not ways in. They prove it is you, so they are not counted above and cannot be taken off.
When it is on, we write to the account’s address to say so.

That code was not right — the app will be showing a new one by now. The field keeps what you typed, so you can see what went in.
That password is not right — Nothing has changed.
Too many attempts. Try again shortly.
If the ten minutes run out, the screen says so and Start again gives you new letters.

checked against the product 21 September 2026