Two-factor authentication is available on every account, buyer or seller, from Settings. It takes about a minute to switch on.
Why it is worth doing
A buyer's account holds every licence and purchase code they own. A seller's holds their products, their sales record and their payout details. A password alone is one leaked database away from being somebody else's.
How it works
Scan a QR code with any authenticator app: Google Authenticator, Authy, 1Password, or whatever your password manager offers. From then on, signing in asks for a six-digit code from that app as well as your password.
There is no SMS option, deliberately. Text messages are the weakest form of second factor and offering them would mostly serve to look thorough.
Setting it up
- Settings, then the security section
- Turn it on and scan the code
- Enter the six digits to confirm, which proves the app is really set up before the lock closes
If you lose the device
Contact support. We will verify who you are through the account's own history before anything is unlocked, so expect that to take a little time. It is deliberately not instant.
Sellers especially
If you take payouts, please turn this on. It is the single cheapest thing you can do to protect money that is on its way to you.