Turning on two-factor authentication
Google Authenticator and recovery codes.
Two-factor authentication means a stolen password is not enough to reach your account. Given this dashboard controls where your royalties are paid, it is worth the two minutes.
Setting it up
- Install an authenticator app — Google Authenticator, 1Password, Authy or similar.
- In the dashboard go to Settings, then Two-Factor Authentication.
- Scan the QR code with the app. If you cannot scan, enter the setup key shown beneath it by hand.
- Type the 6-digit code the app displays to confirm the pairing.
- Save your recovery codes somewhere that is not your phone.
The codes rotate every 30 seconds. If yours is rejected, check that your phone's clock is set to update automatically — a drifting clock is the usual reason a correct-looking code fails.
Afterwards
Signing in then takes two steps: your password, and then the 6-digit code. Recovery codes are single-use — each one works once, so generate a fresh set once you are running low.