How do I use two-factor authentication on my supporter account?

Two-factor authentication adds a second step when you sign in: after your password, you enter a 6-digit code from an authenticator app on your phone. Someone who learns your password still cannot get into your account without your phone. It is optional for supporters.

Turning it on

1. On your supporter dashboard, open the menu under your name at the top right and choose Settings.
2. Under Security, find Two-Factor Authentication and choose Enable 2FA.
3. Scan the QR code with an authenticator app such as Google Authenticator or Authy. If you cannot scan it, type the code shown under "Or enter this code manually" into the app.
4. Enter the 6-digit code the app shows and confirm.

When it works, you will see "Two-factor authentication has been enabled," and the setting reads Enabled.

Signing in with it

After your email and password, a screen titled Two-Factor Authentication asks you to "Enter the 6-digit code from your authenticator app." Type the current code and choose Verify. A new code appears every 30 seconds, so use the one showing now. Back to Sign In returns you to the password step.

This applies everywhere your account signs in, including action forms shown on an organization's own website.

Turning it off

In Settings, next to Two-Factor Authentication, choose Disable. Enter your current 6-digit code to confirm. Turning it off makes your account less secure, so we recommend keeping it on.

I lost my phone or my authenticator app

Contact the organization you signed up with and tell them the email address on your account. Their staff can ask us to turn two-factor authentication off; we will confirm it is you before we do, and you can then sign in and set it up again.

If this does not solve it, contact the organization you signed up with. Their staff can reach us on your behalf.