Set up two-factor authentication

Two-factor authentication keeps your account safe even if someone learns your password. Once it's on, signing in also asks for a 6-digit code from an authenticator app on your phone, such as 1Password, Google Authenticator, or Authy.

Two-factor protects your login across every project you can open, so you only set it up once.

Turn on two-factor

1. Open Your account (the avatar at the bottom of the sidebar), then Sign-in & security.
2. Under Two-factor authentication, choose Set up.

Enlarge

Two-factor authentication section of Sign-in & security, turned off, with the Set up buttonOriginalOriginal

3. If RightMessage asks you to Confirm your password, enter it and choose Confirm.
4. Scan the QR code with your authenticator app. If you can't scan it, copy the setup key under Can't scan it? Enter this setup key into the app instead.
5. Enter the 6-digit code from the app and choose Turn on.

RightMessage then shows your recovery codes. Each one signs you in once if you lose your authenticator app. Choose Copy or Download and keep them somewhere safe, like your password manager, then choose Done.

If you close the dialog before entering a code, Status says Setup not finished. Choose Finish setup to pick up with the same QR code, or Cancel setup to start over later.

Sign in with two-factor

1. Enter your email and password on the sign-in page (opens in a new tab) as usual.
2. On Two-factor authentication, enter the Authentication code from your app.
3. Choose Verify and sign in.

Don't have your phone? Choose Use a recovery code instead and enter one of your saved codes. Each recovery code works only once.

Manage your recovery codes

Under Two-factor authentication, choose Show recovery codes to see the codes you have left. Confirm your password if asked. Regenerate makes a fresh set, and the old codes stop working right away, so save the new ones before you choose Done.

Turn off two-factor

1. Under Two-factor authentication, choose Turn off.
2. In Turn off two-factor?, choose Turn off.
3. If RightMessage asks you to Confirm your password, enter it and choose Confirm. Two-factor turns off right away.

You'll sign in with only your password. Your authenticator app entry and recovery codes stop working, and you can set two-factor up again any time.

If you've lost both your authenticator app and your recovery codes, contact support. For other sign-in problems, see sign in or reset your password.