Set up two-factor sign-in
Two-factor sign-in adds a second step after your password, so a stolen password alone can’t get into your account. You can set it up any time. When your company switches on Require 2FA, you have to set it up the next time you sign in with your password, before anything else opens.
Before you start
Section titled “Before you start”- The platform admin uses an Authenticator app only. Admins, staff and sellers can use an Authenticator app or Email me a code.
- For the app, put an authenticator on your phone first (Google Authenticator, Microsoft Authenticator, Authy, 1Password and similar).
- For email codes, your email must be confirmed. See Change or confirm your email.
- Click your name at the top right and choose Two-factor sign-in. (If you were sent here because your company requires it, you see “Set up two-factor sign-in to continue” and skip this step.)
- Choose Authenticator app or Email me a code.
- With the app: scan the picture with your authenticator app. If you can’t scan, type the key shown under “Can’t scan? Type this key into the app:”. Then type the 6-digit code the app shows and press Verify.
- With email: we send a 6-digit code to your email. Type it and press Verify.
- “Save your backup codes” appears. Press Copy or Print, tick I’ve saved these, then press Continue. See Backup codes.
From now on, signing in with a password asks for a code. See Sign in with a code. Setting up signs you out on your other devices; this one stays signed in.
Switch method, turn off, forget devices
Section titled “Switch method, turn off, forget devices”Open Two-factor sign-in from your account menu. It shows your Method, how many backup codes are left and your Trusted devices.
| Button | What it does |
|---|---|
| Forget all devices | Every browser you trusted is asked for a code again at its next sign-in. Windows already open stay open. |
| New backup codes | Makes 10 new codes and cancels the old ones. Asks for a current code first. |
| Switch method | Staff and sellers only: between the app and email. Asks for a current code, forgets your trusted devices and signs you out on your other devices. |
| Turn off | Only shows while your company isn’t requiring 2FA. Asks for a current code. |
Changing your password or email also asks for a current code once 2FA is on. Type a code from your app, the code we email you (press Send me a code), or a backup code.
If something goes wrong
Section titled “If something goes wrong”| What you see | Why | What to do |
|---|---|---|
| Confirm your email first, or use an authenticator app. | Email codes need a confirmed email. | Confirm your email, or choose Authenticator app. |
| Email codes aren’t available right now. Use an authenticator app. | Email isn’t set up for this app yet. | Choose Authenticator app. |
| Platform admins use an authenticator app. | The platform admin can’t use email codes. | Choose Authenticator app. |
| That code didn’t work. | The code is wrong or old. App codes change every 30 seconds. | Wait for the next code and type it again. Check your phone’s clock is automatic. |
| Start again — the setup has expired. | You waited too long on the setup screen. | Start the setup again. |
| Ask for a new code — this one has expired. | An emailed code lasts 10 minutes. | Choose Email me a code again. |
| Too many emails asked for — try again later. | Too many setup emails in a short time. | Wait, then try again. |
| Too many wrong codes — try again in 15 minutes | 10 wrong codes in 15 minutes. | Wait 15 minutes. |
| Two-factor sign-in is required for everyone. | You tried Turn off while Require 2FA is on. | Leave it on. |