Turn on two-step verification (2FA)

1. 1Go to your profile and scroll down to the Two-step verification (2FA) card (also available at /seguridad).
2. 2Click Enable 2FA.
3. 3Scan the QR code with your authenticator app — any standard TOTP app works: Google Authenticator, Authy, 1Password…
4. 4Enter the 6-digit code shown by the app and click Confirm and enable. You'll see «2FA enabled» and the green active ✓ pill.

From then on, when you sign in with your email you'll also be asked for the authenticator code. To turn it off: the Disable button + a valid code.

• 2FA applies to every way of signing in: after the email code and also after signing in with Google or GitHub — if your account has it enabled, the provider only counts as the first factor and you'll be asked for the authenticator code.
• Each code works only once, and there are attempt limits to stop attacks.
• There are no backup codes: if you lose your authenticator, you won't be able to sign in by email — contact us so we can review your case. Keep the device with your app safe.