How to turn on two-step sign-in

Ask for a code after your password, from an email or an authenticator app.

Updated 2026-10-14

Two-step sign-in means a stolen password alone cannot open your account.

1. Open Settings, then Account.
2. Under Sign-in security, choose how you want the second step:
   • Two-step sign-in by email: Otto emails you a six-digit code each time you sign in.
   • Authenticator app: scan the code with an authenticator app on your phone and type the six digits it shows.
3. Type the code to confirm. Nothing changes until the code arrives, so a mistyped address cannot lock you out.

With an authenticator app you are shown backup codes once. Save them somewhere safe: each works one time if you lose your phone. Make new codes replaces them, and the old ones stop working.

Remembered devices

When you sign in you can tick Remember this device for 30 days. This device in the same panel shows it, and Forget removes it.

Turning it off

Press Turn off two-step sign-in. For an authenticator app it needs your password and a current code.