# Two-factor authentication

> Protect your account with an authenticator app, and what to do if a workspace requires it.

With two-factor authentication, signing in needs your password and a code from an authenticator app.

## Set it up

1. Open your profile and, under **Two-factor authentication**, click **Set up two-factor authentication**.
2. Scan the QR code with an authenticator app, or enter the key by hand with **Can't scan? Enter this key manually**.
3. Enter the **Authentication code** the app shows and click **Enable**.
4. Save the **Recovery codes** somewhere safe. Each code signs you in once if you lose the app.

## When a workspace requires it

An administrator can require every member to sign in with a second factor. If that is the case, the app asks you to set it up on your next sign-in and does not let you continue without it.

## Turn it off or renew the codes

Under **Two-factor authentication**, **Turn off** removes it and **New recovery codes** replaces the old codes. Both ask for your password first.

## Sensitive changes

Some actions, such as changing your email address or requesting a workspace export, ask for your password again even while you are signed in.