Two-step sign-in and backup codes

Turn on two-factor authentication in Settings, choose an email code or an authenticator app, and save your backup codes.

Two-step sign-in (two-factor authentication) asks for a code after your password, so a stolen password alone can't open your account. It protects your catalog and your payouts. You turn it on in Settings.

Turn it on

  1. Open Settings in the sidebar.
  2. Under Login & Security, find Two-Factor Authentication and choose Enable.
  3. Pick how you want to receive your code:
    • Email code. We email a 6-digit code each time you sign in. This is the easiest option, and the one we recommend.
    • Authenticator app. Use Google Authenticator, Authy or 1Password. This is the strongest option, and it works offline.
  4. Confirm your choice:
    • For Email code, enter the 6-digit code we just emailed you and choose Turn on 2FA. If it hasn't arrived, choose Resend code.
    • For Authenticator app, scan the QR code in your app (or type the key shown under it), enter the 6-digit code from the app, enter your account password, and choose Turn on 2FA.
  5. Save your backup codes (see below), then choose Done.

Once it is on, the Two-Factor Authentication row shows which method you use and how many backup codes you have left.

Save your backup codes

When you turn on two-step sign-in, we show you 10 backup codes. Each one works once, in place of your normal code, if you can't get to your email or your phone.

This is the only time the codes are shown. Choose Copy codes and store them somewhere safe, such as a password manager.

Signing in

After you enter your email and password, you see the Two-step verification screen:

  • With an email code, we send a 6-digit code to your inbox. It expires after 10 minutes. If it doesn't arrive, choose Send a new code.
  • With an authenticator app, enter the 6-digit code the app shows.
  • Lost your device? Type one of your backup codes in the same box.

Signing in with Google asks for the code too.

Turn it off

In Settings, choose Disable on the Two-Factor Authentication row. Enter your password and a current code (a backup code works too), then choose Turn off 2FA. If you signed up with Google and never set a password, the code on its own is enough.

To set up the authenticator app option you need a password. If you signed up with Google and never set one, sign out, choose Forgot your password? on the login page, and follow the link we email you.

Open this in your dashboard

Common questions

What if I lose my phone?

Enter one of your backup codes in the code box on the sign-in screen. Each backup code works once.

Does signing in with Google skip the second step?

No. If two-step sign-in is on, you still enter a code after signing in with Google.

Related articles

Back to the help centerStill stuck? Contact our team.