How it works
With two-step verification on, logging in with your email and password also asks for a 6-digit code from an authenticator app on your phone.
It covers password logins only. Google sign-in is not asked for a code: your Google account's own security applies. If you only log in with Google, there is nothing to turn on.
Turn it on
- Open Settings, go to Security, and choose Turn on beside Two-step verification.
- Enter your password and choose Continue.
- In Google Authenticator, 1Password, Authy or any authenticator app, add an account and scan the QR code. If you can't scan it, type in the key shown under it.
- Enter the 6-digit code the app shows and choose Turn on.
- Save your backup codes with Copy or Download, then choose Done. They won't be shown again.
Log in with a code
After your password, the log in page asks you to Enter your code. Type the code from the app and choose Verify. There is also a Trust this device for 30 days box.
No phone? Choose Use a backup code instead. Each backup code works once.
To get a fresh set, choose New backup codes in Settings. Your old codes stop working, including any you haven't used.
Require it for your team
The workspace owner can choose Require beside Require for the team. An owner who logs in with a password must turn it on for their own login first.
After that, every teammate who logs in with an email and password must turn it on before they can open the ledger. Teammates who use Google sign-in are not asked. While it's required, a member can't turn theirs off. Stop requiring ends the rule.
Turn it off
Choose Turn off and enter your password. Logging in then asks only for your email and password. Your backup codes and trusted devices stop working.