# Two-factor authentication

Protect your account with an authenticator app (TOTP).

Go to Settings → Security → Add authenticator. Scan the QR code with 1Password, Google Authenticator, Authy or a similar app, then enter the 6-digit code.

- After you turn it on, you'll be asked for a code each time you sign in.
- You can add more than one device. Remove old ones from the same page.
- Creating API keys and deleting an organisation require a 2FA-verified session.

## Lost your device?

Contact support from the email address on your account. We'll verify your identity before resetting 2FA, and the reset is recorded in your organisation's audit log.