Security: sign-in codes and two-factor

You sign in with your email address and a six-digit code we send you. The code works once and expires in a few minutes. There is no password to steal.

Staff accounts can turn on Two-step sign-in under Settings. Once it is on, you enter a code from your authenticator app after the emailed code.

If you lose a phone or suspect someone else has access, choose Sign out everywhere at the bottom of the side menu (tenants also find it under Security on the portal Account page). It ends every session for your sign-in on every device.

1. Open Settings and choose Two-step sign-in.
2. Turn it on and scan the code with your authenticator app. Save your recovery codes.
3. Use Sign out everywhere if you lose a device.