OfficersEmployersAgencies

Two-factor login, lost phones and recovery codes

Two-factor login (2FA) asks for a 6-digit code from an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password, Authy…) after your password. It's required for admins and officer accounts and recommended for everyone. Officers are taken to the setup page right after sign-up, and must finish it before verifying their status, seeing full listings or applying.

Turning it on

Account → Two-factor login: scan the QR code, enter a code to confirm, then save your 10 recovery codes somewhere safe (a password manager or printed and locked away). Each recovery code works once.

Team members: your organization's owner can require two-step login for everyone on the team. If they do, you'll be asked to set it up before you can open any employer page.

Lost or replaced your phone

1. On the code screen, enter one of your recovery codes instead of the 6-digit code.
2. Once in, go to Account → Two-factor login, turn 2FA off and on again with your new phone, and save the new recovery codes (the old ones stop working). Officer accounts go straight back to the setup page after turning it off, because it's required for officers.
3. Running low? You can generate a fresh set of recovery codes any time.

No phone and no recovery codes

Contact support (category Account or login) from the email address on the account. For your security we verify ownership before an admin can turn 2FA off, and we'll email you when it's done. Never send us codes, passwords or photos of IDs; we won't ask for them.

Codes not working? Check that your phone's clock is set automatically; codes depend on the time.