Two-factor authentication means that even if someone learns your password, they still can't get into your account. Given that this account can trade in your brokerage, we strongly recommend turning it on.

An authenticator app on your phone — Google Authenticator, Authy, 1Password, or your phone's built-in password manager all work.

You'll be shown a set of one-time recovery codes. These are how you get into your account if you lose your phone.

Save them somewhere you can reach without your phone — a password manager, or printed and kept somewhere safe. Don't store them only on the same phone that runs your authenticator app. That's the exact scenario they exist for.

Each code works once. You can regenerate the set from Settings, which invalidates the old ones.

After your email and password, you'll be asked for the current 6-digit code from your app. Codes rotate every 30 seconds — if one is rejected, wait for the next.

Choose the recovery code option on the challenge screen and enter one of your saved codes. Once in, disable and re-enable two-factor with your new device.

If you have neither your phone nor your recovery codes, contact support. We'll need to verify your identity, and it takes time — which is why the codes matter.

Go to Settings → Two Factor Authentication and click Disable, confirming your password. Your old codes stop working immediately.

Your code is always rejected — almost always your phone's clock. Authenticator codes depend on accurate time. Turn on automatic date and time in your phone settings.

You scanned the code but didn't finish — two-factor isn't active until you enter a valid code to confirm. Start again from Settings.