With two-step login, signing in needs your password and a 6-digit code from an authenticator app on your phone — so a stolen password alone isn't enough.
- Install an authenticator app, for example Google Authenticator, Microsoft Authenticator or 1Password.
- In the dashboard, click Two-step login under your name (bottom left).
- Scan the QR code with the app (or type in the key shown), then enter the 6-digit code the app shows.
- Save your recovery codes somewhere safe. If you lose your phone, each one lets you sign in once.
Making it compulsory for managers
In Settings → Who can see what, tick Require two-step login for managers with full access. Managers who haven't set it up are asked to at their next login.
Lost phone?
Sign in with one of your recovery codes instead of the 6-digit code. If you have none left, another manager can click Reset two-step next to your name in Users & Access.
Still stuck? Contact support or speak to your customer manager.