After your password, we usually ask for a six-digit sign-in code that we send by email - or the code from your authenticator app, if you set one up. You can tick Trust this browser so that it does not ask for the code every time for a while; trusted browsers are listed in your account under Security, where you can remove them or sign out everywhere.
For even better protection, set up an authenticator app (for example Google Authenticator, Microsoft Authenticator or 1Password) under Security. Keep the recovery codes in a safe place.
We will never ask you for your password or a sign-in code by email or phone.
Last updated 25 October 2026