Two-factor sign-in

Two-factor sign-in asks for a code from an authenticator app on your phone each time you sign in, after the first step: an emailed code, a passkey or Google. Someone who gets into your email still can't get in.

Turn it on

1. Go to Settings → Your account → Two-factor sign-in.
2. Press Set up two-factor sign-in. If you last signed in more than 15 minutes ago, we ask you to confirm it's you first.
3. Open an authenticator app (for example 1Password, Google Authenticator, Microsoft Authenticator or Authy). Scan the QR code, or type the key by hand.
4. Enter the 6-digit code the app shows.
5. Save your 10 backup codes. We show them only once. Each one works once, if you lose your phone.

Signing in

After the emailed code, a passkey or Google, enter the 6-digit code from your app. A passkey never replaces this step. This also applies when you sign in for the mobile app or an AI assistant (MCP).

• No phone? Press Use a backup code instead.
• On your own device you can tick Trust this browser for 30 days. It's off by default. Don't tick it on a shared computer.
• After 5 wrong codes, sign in again. After 10 wrong codes, your account is locked for 15 minutes.

Turn it off or get new backup codes

In Settings → Your account → Two-factor sign-in, choose:

• New backup codes: your old backup codes stop working.
• Turn off: signing in then needs only the first step again.

Both need a sign-in from the last 15 minutes (confirm it's you).

What else happens

Turning two-factor on or off:

• signs you out on your other devices, the mobile app and connected AI assistants;
• forgets trusted browsers;
• is recorded in the audit log of each of your workspaces;
• sends you an email.

Lost your phone and your backup codes?

Contact TweakTick support. We check it's you, then turn two-factor off. That signs you out everywhere and we email you. Sign in with an emailed code, then turn it on again.