Two-Factor Authentication
Learn about two-factor authentication and protect your account
Two-Factor Authentication (2FA) is an additional security measure that prevents unauthorized access to your account even if someone knows your password. We strongly recommend all users enable this feature.
What is Two-Factor Authentication
Two-factor authentication requires you to provide a dynamic verification code in addition to your password when logging in. This code is generated by an authenticator app on your phone and updates every 30 seconds, ensuring only you can access your account.
Why You Need Two-Factor Authentication
Enabling two-factor authentication effectively protects your account from the following threats:
Password Breach
Even if your password is compromised, attackers cannot log in without your phone
Phishing Attacks
Dynamic codes cannot be predicted or reused, effectively preventing phishing
Brute Force Attacks
Even if your password is cracked, attackers still need your authenticator to log in
Recommended Authenticator Apps
Here are our recommended authenticator apps, please choose based on your device:
Google Authenticator
Official Google app, supports iOS and Android, simple and easy to use
App Store / Google Play
Microsoft Authenticator
Official Microsoft app, supports cloud backup, more convenient when switching devices
App Store / Google Play
Authy
Third-party app, supports multi-device sync and cloud backup
App Store / Google Play / Desktop
How to Enable Two-Factor Authentication
-
Install Authenticator App
Download and install any of the above authenticator apps on your phone
-
Go to Security Settings
Log in to the control center, click your avatar in the top right, select "Account Security"
-
Enable Two-Factor Authentication
Click the "Enable Two-Factor Authentication" button, a setup modal will appear
-
Scan QR Code
Use the authenticator app to scan the QR code in the modal, or manually enter the key
-
Enter Verification Code
Enter the 6-digit code displayed in the authenticator app into the modal to complete setup
Daily Usage
When Logging In
After entering your email and password, the system will require you to enter the 6-digit code from your authenticator to complete login
Code Rules
Codes update every 30 seconds and can only be used once. If a code is about to expire (less than 5 seconds remaining), it's recommended to wait for the next code
Changing Devices
If you've changed your phone or want to use the authenticator on a new device, follow these steps:
- Log in to the control center and go to the Account Security page
- Disable two-factor authentication (requires entering your current code)
- Re-enable two-factor authentication and scan the new QR code with your new device
Note: After disabling two-factor authentication, codes on your old device will be immediately invalidated
What If You Lose Your Authenticator
If you've lost your phone or cannot access your authenticator app, take the following measures:
Can Still Log In
Immediately go to the Account Security page, disable two-factor authentication, then re-enable it on your new device
Cannot Log In
Please contact technical support via your registration email and provide account information to verify your identity. To protect your account security, this process may take 1-3 business days
Prevention tip: Some authenticator apps (like Microsoft Authenticator, Authy) support cloud backup, allowing quick recovery in case of device loss
Usage Tips
- • After enabling two-factor authentication, it's recommended to save your backup key in a secure place (like a password manager)
- • Regularly check that your authenticator app is working properly to ensure it's available when needed
- • Never screenshot or share your QR code or key, as this creates security risks
- • If you suspect your account security has been compromised, immediately change your password and reconfigure two-factor authentication