Profile & stronger sign-in

Quick answer

Use Account settings to strengthen sign-in with a unique password and an authenticator app. Keep recovery codes privately so you have a backup if your authenticator is unavailable.

Enable two-factor authentication

1. Open the Security section and select Enable 2FA.
2. In your authenticator app, scan the QR code or enter the setup key shown on the secure page.
3. Enter the app's current 6-digit code in the confirmation form.
4. When setup succeeds, save the one-time recovery codes somewhere private and separate from the device.
5. Select I've saved my recovery codes after saving them.

Do not share or display the QR code, setup key, authenticator code, or recovery codes. Do not rely on 2FA until setup is confirmed.

Recovery codes

Each recovery code works once. Use one only in the official recovery-code field when you cannot use your authenticator.

Regenerate recovery codes replaces the old set. The current form requires a live authenticator code; a recovery code cannot authorize regeneration. Store the new set securely and stop using the old one.

Before replacing or losing access to a phone, make sure you can continue using your authenticator or have a working recovery route.

Other security settings

• Use a unique account password. A provider-only account can use the secure email flow to set one.
• Review Active sessions and end unfamiliar sign-ins.
• Manage Google and Discord through Sign-in connections.
• Email changes use the secure form, your current account password, and the confirmation sent to the new email.

Your public profile is separate from these private security settings. Keep security and delivery information out of the public bio.

If access is lost

Use a saved recovery code on the official page or contact Support if you cannot recover access. Zezima can explain where to go, but it cannot configure 2FA, revoke sessions, or accept your security codes in chat.