After your password you enter a code. An emailed code works from day one and an authenticator app is optional. You can't switch it off yourself. A device you trust skips the code for 45 days.
What it does
Signing in takes two steps: your password, then a code. Every account has the emailed 6-digit code from the first day. It works for 10 minutes, allows five tries, and you can ask for three new codes an hour.
You can add an authenticator app as a stronger method. Tick Trust this device and that browser skips the code for 45 days.
Why
A stolen password alone should not open an account that holds your drafts, your memory and your payment details.
There is no setting for you to relax this, so no account is left weaker by someone forgetting to turn it on.
What it won't do
- It doesn't give you an off switch.
- It doesn't skip the code on a device you haven't chosen to trust.
How to use it
Open the Platform guide in your dashboard, or start a trial to try it.