How do I turn on two-step verification?

In Settings → Two-step verification, choose one or both: an authenticator app (scan the code with Google Authenticator, Microsoft Authenticator, 1Password, Authy or similar, then enter the 6-digit code) or a code by email (we email you a code to confirm it reaches you). After your password, sign-in asks for a code from whichever you turned on.

With the authenticator app you also get backup codes: each works once if you lose your phone, and you can make new ones later. You can switch either method off separately.

If you sign in with Google, your Google account’s own two-step verification protects you.