Two-factor authentication
Two-factor authentication means a stolen password is not enough on its own to get into your account. With it on, signing in asks for a six-digit code from an authenticator app on your phone as well as your password.
It is off until you turn it on, in Account settings.
Turning it on
- Under Two-factor authentication, choose Set up.
- Scan the QR code with your authenticator app. If you cannot scan it, type the key shown under it into the app by hand.
- Type the six-digit code the app shows.
- Choose Verify and turn on.
Nothing changes on your account until that code checks out. If you close the page or choose Cancel part way through, two-factor stays off, so a QR code you never scanned cannot lock you out.
The app lists the account under FormsUI and your email address.
The QR code is drawn in your browser. It contains the secret your codes are made from, so it is never sent anywhere else to be drawn.
Signing in with it on
After your password, you are asked for the current code from the app.
Turning it off
Choose Turn off. Signing in goes back to needing only your password.
If the page cannot tell
If FormsUI cannot check whether two-factor is on, the section says so. Reload the page to try again.