Turn on two-factor authentication

Two-factor authentication adds an authenticator-app code to every new sign-in, including Google and GitHub sign-ins.

Start setup

1. Sign in and open Two-factor authentication, also available through your account security settings.
2. Choose Turn on two-factor.
3. Prove your identity with your current password, or reauthenticate with your existing Google or GitHub provider when asked.
4. Select Continue.

Connect your authenticator

Scan the setup QR code with your authenticator app. If you cannot scan it, use the manual setup key shown on screen. Keep that key private.

Continue to Verify your authenticator. Enter the current code from your app and select Turn on two-factor. The factor is activated only after a valid code is verified.

Save your recovery codes

Use Copy or Download to save the recovery codes somewhere safe. Confirm that you saved them before finishing setup. Each recovery code works once. The codes are shown once; SomHack cannot show that same set again later.

Other browsers will be signed out. You normally stay signed in in the current browser. An active lab will be requested to stop.

If you lose your authenticator app and all your recovery codes, support can't turn two-factor off for you. Losing both may permanently lock you out.

After setup

Use a current authenticator code at your next sign-in. If you cannot open the app, sign in with a recovery code.