2-step verification adds an extra check when you sign in. After your email address and password, you enter a 6-digit code from an authenticator app or a text message. It stops anyone signing in with just your password.
Turn it on
- Sign in to the dashboard.
- Select your name (top right), then 2-step verification.
- Choose how you want to get your codes, and follow the steps on screen.
Authenticator app (recommended)
- Install an authenticator app on your phone, for example Google Authenticator, Microsoft Authenticator or 1Password.
- Scan the QR code on screen with the app.
- Enter the 6-digit code the app shows.
- Save your recovery codes (see below).
Text message
Enter a UK mobile number. We'll text you a code to enter each time you sign in.
Recovery codes
When you set up 2-step verification, you'll get a set of recovery codes. Keep them somewhere safe, such as a password manager. If you don't have your phone, you can sign in with a recovery code instead.
You can make new recovery codes at any time from 2-step verification in the user menu.
Signing in
After your email address and password, you'll see Enter your code. Enter the code from your app or text message. You can also:
- select Text me a code instead to get a code by text message, if you've added a phone
- select Use a recovery code if you don't have your phone
Change your settings
Select your name (top right), then 2-step verification. From there you can:
- make new recovery codes
- add or change a backup phone
- move to a new phone or authenticator app
- turn 2-step verification off, unless it's required for your account
Lost your phone?
Use one of your recovery codes to sign in. If you don't have them, ask an admin at your charity to go to Organisation > Team, select ••• next to your name, then Disable MFA. You can then sign in and set up 2-step verification again.
If there's no other admin, call us on 0333 4444 777.