Two-factor protection

An email code at every sign-in — even if someone learns your password.

With two-factor protection, every sign-in except the emailed-code one also sends a code to your email. Without it the dashboard stays closed.

How to turn it on

1. Account → Security.
2. Turn on two-factor protection and confirm with the emailed code.

What signing in looks like

1. You enter your password or sign in with Google.
2. An email arrives with a code and a button. It shows the IP address and browser of the sign-in.
3. Enter the code, or open the link and click Confirm on the site. The code is valid for 10 minutes.

Signing in with an email code needs no second code: access to your email already is the second factor.

We never ask for a code, a password or a sign-in link — not in Telegram, not by email. Do not forward them to anyone.