Two-step verification adds a second check when you sign in. After you sign in, Twofold asks for a 6-digit code from an authenticator app on your phone. It works on the web and in the Twofold mobile app.
Before you start
You'll need an authenticator app, such as Google Authenticator, Microsoft Authenticator, or 1Password. Text message (SMS) codes aren't available.
Two-step verification is turned on from the web app at app.trytwofold.com. Once it's on, the mobile app asks for your code too.
If you use the Twofold mobile app, update it to the latest version first.
Each person turns it on for their own account.
Turn on two-step verification
Go to Settings → Security (app.trytwofold.com/settings/security). This is in Settings, not the Account window you open from your profile icon.
Click Turn on.
Scan the QR code with your authenticator app. You can also click Copy and enter the setup key by hand. If your authenticator app is on the same device, click Authenticator on this device? Open it here.
Enter the 6-digit code your app shows. The code changes every 30 seconds.
Click Verify and turn on.
Save your backup codes
Next, Twofold shows your backup codes. They're shown only once, so save them now.
Each backup code signs you in one time if you can't get to your authenticator app. Click Copy codes or Download .txt and keep them somewhere other than your phone, like a password manager. Then tick I've saved these codes somewhere safe and click Done.
The Security page now shows two-step verification as On.
Signing in
After you sign in with your password or Google, you'll see a Two-step verification screen. Open your authenticator app, enter the current 6-digit code, and click Verify.
Don't have your phone? Click Use a backup code instead and enter one of your saved codes.
Get a new set of backup codes
Go to Settings → Security, click Turn off, then turn it back on. You'll get a new set of backup codes during setup.
Turn off two-step verification
Go to Settings → Security and click Turn off.
Lost your phone and your backup codes?
Your backup codes are the only way into your account without your authenticator app, so keep them safe. If you've lost both, contact us at [email protected].