Turn on two-factor authentication
Add a code from an authenticator app to every sign-in, keep a second authenticator in case you lose your phone, and remove one you no longer use.
On this page
With two-factor authentication on, signing in takes two things: your password or your Google account, and a six-digit code from an authenticator app on your phone. Someone who learns your password still can't get into your account.
Before you start
You need an authenticator app: any app that makes time-based codes, such as Google Authenticator, Microsoft Authenticator or a password manager that keeps one-time codes.
Set it up
Start the setup
On your account page — see Open your account page — find Multi-factor authentication. It says Off. Select Set up.
Scan the QR code
Scan the code in the dialog with your authenticator app. If you can't scan it, select Can't scan? Show the key and type the key into the app instead.
Enter the code it shows
Type the six digits the app shows into Six-digit code and select Verify.
- The status: Off or On.
- Set up adds your first authenticator.
The card now says On and lists the app as “Authenticator 1”. We email you that a two-step method was added. From now on every sign-in asks for a code, and your other signed-in devices are asked for one before they can carry on.
Sign in with a code
After your password, or after Google, the sign-in page shows Two-factor authentication. Type the code your app shows into Authentication code and select Verify. A code changes every 30 seconds or so: if one is refused, wait for the next. Back takes you back to the sign-in page.
The same code is what Confirm it's you asks for before a sensitive change.
Add a second authenticator
There are no recovery codes: what gets you in when you lose your phone is a second authenticator. Select Add authenticator and follow the same steps on another device — a second phone, a tablet, or a password manager on your computer. Each one is listed on the card, and a code from any of them signs you in and confirms it's you.
Remove an authenticator
Select Remove next to it and confirm it's you. Removing the last one turns two-factor authentication off, and the card says Off again. We email you each time one is removed.
If you lose your phone
Sign in with a code from your other authenticator, then remove the lost one and add the new phone. If you have no other authenticator, write to support: the Table QR team can reset two-factor authentication on your account, so you can sign in with your password again and set it up anew.