Signing in with an authenticator app

An authenticator app on your phone (Google Authenticator, Microsoft Authenticator, 1Password, Authy and others) makes a new 6-digit code every 30 seconds. After your password you type the current code, so a stolen password is not enough on its own. It works without a signal and no code is emailed or texted.

Set it up. Open the menu with your name in the top right and choose Two-factor sign-in. Choose Set up an authenticator app, scan the picture with your app (or type the key it shows), then enter the code the app shows. Save the recovery codes you are given: each one works once if you lose your phone, and they are shown only this once.

Signing in. Enter your password, then the code from your app. Codes work once, so wait for the next one if a code is refused as already used. If your code is refused again and again, check that your phone is set to set its date and time automatically; a clock that is even a minute out makes every code wrong.

Lost your phone? On the code page choose Use a recovery code. If you have none left, ask your administrator to reset your authenticator: you will be signed out everywhere and asked to set up again at your next sign-in.

After five wrong codes in a row, sign-in pauses for 15 minutes.