Account Security

Two-factor authentication, backup codes, and session management keep your Zerosum account locked down. Here's how to set them up and what to do if you lose access.

Two-factor authentication

Two-factor authentication is available after you add a password to your account. Once enabled, it requires an authenticator code after password, Apple, Google, or one-time email-code sign-in.

1. Set a password. In Settings → Security, add a password if you don't have one yet. Two-factor needs it.
2. Confirm your password. When you start setup, re-enter your current password.
3. Scan the QR code. Use an authenticator app, then enter the 6-digit code.
4. Save your backup codes. Store them somewhere private, like a password manager.

Your security tools

• 2FA: an authenticator app adds an extra sign-in check.
• Backup codes: each code works once if your authenticator is unavailable.
• Sessions: sign out browsers or devices you no longer use.

ℹ️ Important: Save your backup codes in a password manager before you need them. Generating a new set deletes the old set.

If you lose access

• Use a backup code. Choose Backup code on the 2FA screen.
• Check open sessions. If you're still signed in somewhere, revoke anything unfamiliar.
• Contact support. Email [email protected] from your account email.

⚠️ Warning: Recovery is intentionally careful. We don't turn off 2FA from an unverified email alone, and we'll never ask for your authenticator code or backup codes.

Trusted browsers and sessions

The 30-day trust option applies to this browser, not every device. Use it only on computers you control, and revoke active sessions you don't recognize.

Where to next

• Data security: how your data is stored and protected.
• Settings: manage your account and preferences.