Who this is for
You want your account protected even if your password leaks. Two-factor sign-in asks for a six-digit code from your phone every time you log in. We recommend it for everyone.
Time: 3 minutes. You'll need: an authenticator app (1Password, Authy, Google Authenticator, iOS Passwords — any of them).
Steps

1. Start setup
On Settings → Security, press Set up two-factor.
2. Scan the code
Open your authenticator app and scan the QR code (or paste the secret it shows). Your app starts generating six-digit codes.
3. Confirm
Type the six-digit code your app is showing right now, then press Verify + enable. From your next sign-in, you'll enter a code after your password.
Verify it worked
The Security page shows two-factor as Enabled, and your next sign-in asks for a code.
Troubleshooting
The code didn't work. Authenticator codes change every 30 seconds — enter the current one, and check your phone's clock is set automatically.
I've lost my phone.
Recovery goes through your email, so keep that secure. If you're locked out,
email hello@getscarlett.ai.
Super-admins can't turn it off. For staff with admin-console access, two-factor is required and can't be disabled while signed in as super-admin.
What's next
- Choose your notifications — how you hear about events.
- Manage billing, your plan and invoices — your plan and card.