Turn on two-step verification

A 6-digit code from your phone after your password, so a stolen password is not enough.

With two-step verification, logging in needs your password and a 6-digit code from an authenticator app on your phone. Even someone who learns your password cannot log in or move your domains.

1. Install an authenticator app (any standard one) on your phone.
2. Open Security and find Two-step verification.
3. In the app add an account and scan the code, or enter the key shown (or open the link on your phone).
4. Enter the code the app shows to confirm.
5. Save your recovery codes now. Each works once if you lose your phone and they are shown only this time.

• Lost your phone? Use a recovery code at the log-in step; we email you when one is used.
• Code not accepted? Make sure your phone's time is set automatically, then use the newest code.
• New recovery codes: from the same page, press Get new recovery codes; the old ones stop working.
• Turn it off: from the same page, with your password.