Turn on two-factor sign-in
Ask for a code from an authenticator app each time you sign in with your password, with recovery codes as a backup.
Every plan
- Go to Settings → Account → Two-factor sign-in.
- Scan the QR code with an authenticator app such as 1Password, Google Authenticator or Authy.
- Type the 6-digit code from the app to confirm.
- Save your recovery codes somewhere safe and select I’ve saved them. Each code signs you in once if you can't use your app; this is the only time they're shown.
From then on, signing in with your password asks for a code (or a recovery code). It works in the iPhone, iPad and Mac apps too. Google and Apple sign-in keep their own checks.
To turn it off, use the same card in Settings; it asks for a code first.