<p>You want to feel safe and secure in everything you do in life, particularly when it comes to your personal data. That’s why we’ve implemented several security measures to make your Todoist account as safe as possible.</p>
<p>Read on to learn more!</p>
<h2>Enable two-factor authentication</h2>
<p>Two-factor authentication (also referred to as 2FA) adds an extra layer of security to your account by requiring you to use an authentication app when logging into your account.</p>
<div class="box-tip">If you don’t already have an authentication app (such as Authy or Google Authenticator) on your mobile device, make sure to install one first.</div>
<p>In order to use 2FA on your account, you’ll need to turn on the setting first. Here’s how:</p>
<div data-platforms="">
<div data-platform="web">
<ol>
<li>Log in to Todoist in a browser.</li>
<li>Click <strong>your avatar</strong> in the top-right corner.</li>
<li>Click <strong>Settings</strong>.</li>
<li>Select <strong>Account</strong> in the left-hand menu.</li>
<li>Click the toggle below <strong>Two-factor authentication</strong>.</li>
<li>Scan or copy the secret code you see to your authentication app.</li>
<li>Enter the verification code in Todoist, and you'll see <strong>Verification successful</strong>.</li>
<li>Click <strong>Continue</strong> in the bottom-right corner.</li>
<li>Scroll down to <em>Save your recovery codes</em> and click <strong>Copy all codes</strong>.
<ul>
<li>It’s very important that you save these codes in a secure place. If you ever get logged out of your account, you may need them to get back in.</li>
</ul>
</li>
<li>Click <strong>Continue</strong> in the bottom-right corner.</li>
</ol>
</div>
<div data-platform="ios">
<ol>
<li>In your Todoist app, tap the <strong>gear icon</strong> in the top-right corner.</li>
<li>Select <strong>Account</strong>.</li>
<li>Tap the <strong>Require 2FA</strong> toggle.</li>
<li>Copy the secret code you see to your authentication app.</li>
<li>Enter the verification code in Todoist.</li>
<li>Tap <strong>Done</strong> in the top-right corner, and you'll see <strong>Verification successful</strong>.</li>
<li>Scroll down to <em>Save your recovery codes</em> and tap <strong>Copy all codes</strong>.
<ul>
<li>It’s very important that you save these codes in a secure place. If you ever get logged out of your account, you may need them to get back in.</li>
</ul>
</li>
<li>Tap <strong>Done</strong> in the top-right corner.</li>
</ol>
</div>
<div data-platform="android">
<ol>
<li>In your Todoist app, swipe up the bottom app bar to open the menu.</li>
<li>Tap the <strong>gear icon</strong> in the top-right corner.</li>
<li>Select <strong>Account</strong>.</li>
<li>Tap the <strong>Two-factor authentication</strong> toggle.</li>
<li>Copy the secret code you see to your authentication app.</li>
<li>Enter the verification code in Todoist, and you'll see <strong>Verification successful</strong>.</li>
<li>Scroll down to <em>Save your recovery codes</em> and tap <strong>Copy all codes</strong>.
<ul>
<li>It’s very important that you save these codes in a secure place. If you ever get logged out of your account, you may need them to get back in.</li>
</ul>
</li>
<li>Tap <strong>Done</strong> in the top-right corner.</li>
</ol>
</div>
</div>
<p>2FA will now be enabled on your account.</p>
<h2>Disable 2FA</h2>
<div data-platforms="">
<div data-platform="web">
<ol>
<li>Log in to Todoist in a browser.</li>
<li>Click <strong>your avatar</strong> in the top-right corner.</li>
<li>Click <strong>Settings</strong>.</li>
<li>Select <strong>Account</strong> in the left-hand menu.</li>
<li>Scroll down to <em>Two-factor authentication</em> and toggle the setting <strong>Off</strong>.</li>
<li>Enter a one-time passcode from your authentication app or one of your recovery codes.</li>
</ol>
</div>
<div data-platform="ios">
<ol>
<li>Tap the <span data-icon="ios-Settings"></span> <strong>gear icon</strong> in the top-right corner of Todoist.</li>
<li>Select <strong>Account</strong>.</li>
<li>Use the toggle under <em>Two-factor authentication</em> to disable 2FA.</li>
<li>Enter a one-time passcode from your authentication app or one of your recovery codes.</li>
</ol>
</div>
<div data-platform="android">
<ol>
<li>In your Todoist app, swipe up the bottom app bar to open the menu.</li>
<li>Tap the <strong>gear icon</strong> in the top-right corner.</li>
<li>Select <strong>Account</strong>.</li>
<li>Use the toggle to the right of <em>Two-factor authentication</em> to disable 2FA.</li>
<li>Enter a one-time passcode from your authentication app or one of your recovery codes.</li>
</ol>
</div>
</div>
<h2>FAQ</h2>
<div data-accordion="">
<h4>What is a one-time passcode?</h4>
<p>A one-time passcode is a six digit code generated by your authentication app. If you’ve enabled 2FA on your account, you’ll be prompted to use a one-time passcode for a variety of actions such as:</p>
<ul>
<li>Logging in to your Todoist account.</li>
<li>Disabling 2FA.</li>
<li>Changing your email address in your Todoist account.</li>
<li>Downloading a backup of your account.</li>
<li>Deleting your Todoist account.</li>
</ul>
<h4>What is a recovery code?</h4>
<p>Your recovery codes are unique to your account and can be used to gain access to your Todoist account if you’re no longer able to generate a one-time passcode (for example, if your mobile device breaks and you’re no longer able to log in to your authentication app).</p>
<p><strong>Copy or generate new recovery codes</strong></p>
<div data-platforms="">
<div data-platform="web">
<ol>
<li>Click <strong>your avatar</strong> in the top-right corner.</li>
<li>Click <strong>Settings</strong>.</li>
<li>Select <strong>Account</strong> in the left-hand menu.</li>
<li>Scroll down to <em>Two-factor authentication</em> and click <strong>See your recovery codes</strong>.</li>
<li>(Optional) If you want to replace your current codes, click <strong>Generate new codes</strong>.</li>
<li>Click <strong>Copy all codes</strong>.</li>
</ol>
</div>
<div data-platform="ios">
<ol>
<li>Tap the <strong>gear icon</strong> in the top-right corner of Todoist.</li>
<li>Select <strong>Settings</strong>.</li>
<li>Select <strong>Recovery Codes</strong>.</li>
<li>(Optional) If you want to replace your current codes, tap <strong>Generate new codes</strong>.</li>
<li>Tap <strong>Copy all codes</strong>.</li>
</ol>
</div>
<div data-platform="android">
<ol>
<li>In your Todoist app, swipe up the bottom app bar to open the menu.</li>
<li>Tap the <strong>gear icon</strong> in the top-right corner.</li>
<li>Select <strong>Account</strong>.</li>
<li>Select <strong>Recovery Codes</strong>.</li>
<li>(Optional) If you want to replace your current codes, tap <strong>Generate new codes</strong>.</li>
<li>Tap <strong>Copy all codes</strong>.</li>
</ol>
</div>
</div>
<p><strong>Use a recovery code</strong></p>
<ol>
<li>Start the login process like you normally would.</li>
<li>When you get to the step where you get asked for an authentication code, select <strong>Go here to recover your account</strong>.</li>
<li>Enter one of your active recovery codes.</li>
</ol>
<h4>I can't see a two-factor authentication setting in my account. What should I do?</h4>
<p>Make sure you have no pending updates for Todoist. If you still can't see a two-factor authentication setting in your account, please try logging out of Todoist and back in again.</p>
<h4>What authentication apps do you support?</h4>
<p>We support the majority of popular authentication apps, such as Google Authenticator and Microsoft Authenticator.</p>
<h4>I don't have access to my authentication app and my recovery codes. What should I do?</h4>
<p>If you've lost access to both means of recovering your account, you won't be able to access your account anymore, unfortunately.</p>
<h4>I still haven't verified my account. How do I do that?</h4>
<p><a href="https://get.todoist.help/hc/en-us/articles/5870236184348" target="_blank" rel="noopener">This article</a> will tell you how to verify your account.</p>
<h4>Does Todoist 2FA support physical security keys?</h4>
<p>At the moment, we only support authentication apps, but we hope to support security keys in the future.</p>
</div>

How to enable two-factor authentication