How to set up two-factor authentication

Two-factor authentication (MFA) adds a second check when you sign in: your password, plus a 6-digit code from an app on your phone. If your company requires it, you are sent to the Set Up Two-Factor Authentication page automatically the first time you sign in.

Before you start

Install an authenticator app on your phone — Microsoft Authenticator or Google Authenticator both work. Any TOTP authenticator will do.

Step 1 — Scan the QR code

  1. In your authenticator app choose Add account and scan the QR code on screen.

    The MFA setup page showing the QR code and a manual key
    The setup page — scan the code or copy the key. — screenshot pending
  2. Can’t scan? Click the key below the code to copy it, then paste it into your app’s “enter a setup key” option.

Step 2 — Confirm the code

  1. Read the current 6-digit code for L8MS in your app and type it into the six boxes. It is checked as soon as the sixth digit is entered.

  2. If it says Incorrect code, wait for your app to show a fresh code and try again — codes change every 30 seconds.

Step 3 — Save your backup codes

  1. When MFA activates you are shown a set of one-time backup codes. These let you in if you lose your phone.

    The backup codes screen with a Download as text file button
    Your backup codes. — screenshot pending
  2. Click Download as text file and keep it somewhere safe — a password manager, or printed and locked away. Not on the same device as your password.

  3. Click I’ve saved my codes — Continue.

Each backup code works once

Cross a code off after you use it. If you get a new phone, or run low on codes, reset MFA from Account settings to start again with a fresh set.