Add extra security with two-factor login
Two-factor login asks for a 6-digit code from an app on your phone, as well as your password. Even if someone steals your password, they can't get in.
Turn it on
Click Security in the left-hand menu.
Start the set-up under Two-factor authentication.
Open an authenticator app on your phone (Google Authenticator, 1Password or Authy all work).
Scan the QR code on screen, or type the key in by hand.
Type in the 6-digit code the app shows, and confirm.
From now on, logging in asks for your password and a code from the app.
Turn it off
On the same page, press Turn off two-factor authentication. Your account is then protected by your password alone.
Lost your phone?
Someone on your team with Full access can press Reset 2FA next to your name on the Team page. You can then log in with just your password, and set it up again if you want. See Add a team member.
The mobile app doesn't ask for a 2FA code yet, so two-factor login only protects the website.
Still stuck?
If this didn't solve it, tell us what you're trying to do and we'll help.