Protect your account with two-factor authentication

Domains are a common hijacking target — an attacker with your password could transfer them away. 2FA requires a 6-digit code from your phone at sign-in, so a stolen password alone is useless.

1. Go to Account settings → Enable 2FA.
2. Add the setup key to Google Authenticator, Authy, 1Password or any TOTP app.
3. Confirm with a code, then save your backup codes — each one works once if you lose the phone.

We additionally email you on sign-ins from new IP addresses and on password changes, and you can sign out all other devices from Account settings.