Turn on two-factor
- Open Security and scan the QR code with an authenticator app.
- Enter the first code to confirm.
- Save the ten single-use backup codes: they are shown once.
Good to know: It applies however you sign in: password, Discord or Steam. A lost phone and lost backup codes cannot be recovered by you; write to support from your account e-mail.
Your sessions
Security lists the browsers you are signed in on, with the browser and system, never an IP address. Sign one out, or all others. Changing your password or two-factor signs the others out.
Staff and sensitive actions
As owner you can require two-factor from your staff. Dangerous actions, such as deleting a server or creating an API token, ask for a code or your password again.