Two-factor authentication

Two-factor (often called 2FA) is a second step at sign-in. Even if someone has your password, they still cannot get in without the second step. We strongly recommend you turn it on.

How it works

After you sign in with your email and password, we ask for a six-digit code. The code lives in an app on your phone. The code changes every thirty seconds. Without the code, the sign-in fails.

How to turn it on

1. Sign in.
2. Go to Settings.
3. Click Security.
4. Click Turn on two-factor.
5. We show a square pattern called a QR code.
6. Open an authenticator app on your phone. Google Authenticator, Authy, 1Password, and more all work.
7. In the app, add a new account and scan the QR code.
8. The app shows a six-digit code. Type it into ShoutXChange to confirm.
9. We give you a list of recovery codes. Save them somewhere safe (more on this in another article).

That is it. The next time you sign in, ShoutXChange will ask for the six-digit code from your app.

Why use it

Most account hacks are not fancy. The hacker tries a password from a leaked list, and it works because the person used the same password on a smaller site that got hacked. Two-factor stops that. The leaked password is useless without your phone.

If you have any kind of money on your ShoutXChange account, we think you should turn this on. It takes one minute. It saves headaches.

What if I lose my phone?

That is what recovery codes are for. We give you ten codes when you set up two-factor. Save them. If you lose your phone, you can use one code to sign in once. After you sign in, set up two-factor again on a new phone.

Can I turn it off?

Yes. Go to Settings, Security, and click Turn off. We will ask for your password again to confirm. You can turn it back on later.

What apps do you recommend?

Any of these are good:

• Google Authenticator. Simple and free.
• Authy. Works across phones if you change devices a lot.
• 1Password. If you already use a password manager.

All of them give the same six-digit code at the same time, because they all follow the same standard.