Two-step verification and sessions

Two-step verification (2FA) asks for a code from your phone in addition to your password.

Turning on two-step verification

1. Open Account (your name, at the bottom of the side menu) and go to the Security tab.
2. Click Turn on. With Copy key or Copy link, paste it into your authenticator app.
3. Type in Code the 6 digits shown by the app and click Confirm and turn on.

If the code does not match, check that your phone’s time is set to automatic.

Lockouts and sessions

• •After 8 failed attempts the account is locked for 15 minutes.
• •A session lasts 14 days of use.
• •The password reset link expires after 30 minutes.
• •Settings has the option “Require 2FA for the whole team”, but it does not yet force anyone to sign in with it: that will come later.