ZeroTwo supports two-factor authentication with an authenticator app. When it is on, signing in also asks for a 6-digit code from that app. You manage it under Settings, Security, in the web app, the desktop app, and the iPhone, iPad and Android apps.
Turn it on
- Open the account menu (your name at the bottom of the sidebar), choose Settings, then select Security.
- Switch on Two-factor authentication. A dialog titled Set up Two-Factor Authentication shows a QR code.
- Scan the QR code with your authenticator app. The dialog names Google Authenticator, Authy and 1Password as examples. If you cannot scan it, copy the key under Manual Entry Code into the app instead.
- Type the 6-digit code the app shows into Verification Code and select Verify & Enable.
If you close the dialog before verifying, the setup is cancelled and two-factor authentication stays off. On iPhone, iPad and Android the switch is in the same place, and the setup screen shows the QR code and a key you can enter by hand.
Signing in with it on
After you sign in with your usual method, the web app shows Two-Factor Authentication Required. Enter the 6-digit code from your authenticator app in Verification Code and select Verify & Continue. The iPhone and iPad apps show a screen with the same title and button. The Android app asks for the same code on a screen with a Verify button.
Turn it off
Switch Two-factor authentication off in Settings, Security. ZeroTwo removes the authenticator from your account and sign-in stops asking for a code. You can delete the matching entry in your authenticator app. If you turn two-factor authentication on again later, you scan a new QR code.
About backup codes
While two-factor authentication is on, the web Security page also shows a Backup codes row with a Generate Codes button (it becomes View Codes afterwards), and the web app may open a Backup Codes dialog right after you verify. The iPhone, iPad and Android apps have a matching option. Do not count on these codes to get back into your account. ZeroTwo generates the codes on your device and does not keep them, only a note that you generated them, and the sign-in prompt has one field for the authenticator's 6-digit code and nowhere to enter a backup code.
Protect your authenticator app instead. Use one that lets you back up or move your accounts to a new phone. If you lose access to it and cannot sign in, contact ZeroTwo support and name the email address or phone number you sign in with.
For wider advice, see keeping your ZeroTwo account secure.