Two-factor authentication is the single most effective control on your account. Enable it before connecting a bank.
Setting it up
1. Open security settings and choose two-factor authentication.
2. Scan the QR code with an authenticator app such as 1Password, Authy, or Google Authenticator.
3. Enter the six-digit code to confirm the pairing.
4. Save your recovery codes somewhere safe and offline.
Signing in with 2FA
After your password you are asked for the current code. Trusted devices can be remembered for a limited period; a code is always required from a new device or browser.
Recovery codes
Each code works once. Store them in a password manager or print them. Losing both your authenticator and your recovery codes means identity verification with support, which is deliberately slow.
Changing devices
Disable and re-enable 2FA on the new device while you still have access to the old one. This regenerates the secret and invalidates the previous pairing.
What 2FA protects
It stops password reuse and credential stuffing from becoming account takeover. It does not protect against malware on your own device or against approving a prompt you did not initiate — never approve a code you did not request, and change your password if that happens.