How do I turn on two-factor sign-in?

What it does

With two-factor on, every sign-in — with a password, an emailed code, Google or Apple — also asks for a six-digit code from an authenticator app on your phone, such as Google Authenticator or 1Password. A stolen password or a read inbox is then not enough on its own. It needs a password on the account: one made with Google, Apple or a code sets one first, in Settings → Security → Password.

Turn it on

1. In odo, open Settings → Security → Two-factor authentication
2. Enter your password
3. Tap Open my authenticator to add odo to it, or copy the key shown and type it in there
4. Type the six-digit code the authenticator shows, and tap Turn on two-factor
5. Save the recovery codes somewhere safe

Nothing changes until the code checks out, so leaving half-way leaves two-factor off.

Turn it on

1. In odo, open Settings → Security → Two-factor authentication
2. Enter your password
3. Tap Open my authenticator to add odo to it, or copy the key shown and type it in there
4. Type the six-digit code the authenticator shows, and tap Turn on two-factor
5. Save the recovery codes somewhere safe

Nothing changes until the code checks out, so leaving half-way leaves two-factor off.

Turn it on

1. Sign in at my.odo.tax and open Settings → Security → Two-factor authentication
2. Enter your password
3. Click Turn on 2FA and scan the QR code with your authenticator app
4. Type the six-digit code it shows and click Continue
5. Save the recovery codes somewhere safe

If you lose the phone

A recovery code signs you in instead of the six-digit one; each works once. On the same page you can show them again, replace them — the old ones stop working straight away — or turn two-factor off, which asks for your password again.