Set up two-factor authentication (2FA)

Two-factor authentication (2FA) adds a one-time code from an authenticator app on top of your password.

Before you start

Install an authenticator app on your phone (Google Authenticator, Microsoft Authenticator, Authy, or 1Password).

Steps

1. Go to Settings → Security → Two-factor and click Set up.
2. In your authenticator app, scan the QR code shown. Can't scan? Copy the setup key and enter it manually.
3. Your app now shows a 6-digit code that refreshes every 30 seconds. Enter the current code and click Verify & enable.
4. Save your recovery codes somewhere safe — they let you sign in if you lose your phone.

Turn it off

Go to Settings → Security → Two-factor and confirm with a current code to disable it.

Other options

• Email two-step verification — get a one-time sign-in code by email instead.
• Passkeys — sign in with Face ID / Touch ID / a security key (see Add a passkey).

Troubleshooting

• "Invalid code" — your phone's clock may be off; enable automatic time, then try the newest code.
• Lost your device? — use a recovery code, or contact support with your support PIN.

Related: Add a passkey · Set your support PIN · Log in to Orvoro