How to Turn on Two-Factor Authentication
What is Two-Factor Authentication?
Two-Factor Authentication (2FA) adds extra safety to your account. When you sign in, you'll need:
- Your password
- A six-digit code from an authenticator app on your phone
Even someone who knows your password can't get in without the code.
What you need
- A smartphone
- An authenticator app that supports TOTP codes, such as Google Authenticator, Microsoft Authenticator, or Authy
- A few minutes to set it up
Where to find it
- Step 1: Open your account — My Account at the bottom of the sidebar on desktop, or the Account tab in the bottom navigation on your phone.
- Step 2: Go to the Security section.
- Step 3: In the Sign-In card, find the Two-Factor Authentication (2FA) row ("Codes come from your authenticator app (TOTP).") and select Enable 2FA.
The setup steps
The Enable Two-Factor Authentication dialog walks you through a short stepper — generate the setup, verify a code, then confirm:
- Step 1: Generate the setup. The dialog shows a QR code: "Scan the QR code below using an authenticator app. Once scanned, enter the verification code to complete the setup." If you can't scan, use Or enter this code manually: and copy the code into your app.
- Step 2: Your authenticator app now shows a six-digit code for MyWatchtower. Type it into the Enter verification code field and select Verify. If you see "Invalid verification code", wait for the next code and try again.
- Step 3: On confirmation, you'll see "Two-factor authentication has been enabled. Please sign in again." — you are signed out on purpose.
- Step 4: Sign back in. From now on, after your password you'll be asked for a code from your app. The Security section shows a green Enabled chip on the 2FA row.
Turning 2FA off
In the same row, select Disable 2FA (a red button). Enter a current code from your authenticator app to verify, then confirm. You'll be signed out again once it's disabled.
Why use 2FA?
- Someone with just your password can't get in
- Your account and personal information stay much safer
Tip: Keep your authenticator app installed before deleting or replacing your phone — you'll need a code to sign in or to disable 2FA.