Protect sign-in with an authenticator app or email codes: setup, recovery codes, the 30-day remember option, and how to disable 2FA safely.
Open your Security page (user menu → Security). Under Two-factor authentication you can enable either — or both — of:
The first time you enable a factor you get 10 recovery codes, shown once — "store these somewhere safe; each can be used once to sign in if you lose your device." You can regenerate them any time with Regenerate recovery codes (which invalidates the old set).
After your password, you'll be asked for a 6-digit code from your authenticator app or email. Tick Remember this device for 30 days to skip the prompt on a machine you trust — on an unrecognized device the prompt always appears, remembered or not. Lost your device? Use Use a recovery code, or switch methods with Email me a code instead / Use your authenticator app if you enrolled both.
Signing in with a passkey? The two-factor prompt doesn't appear — a passkey already proves both your device and your identity (Face ID, Touch ID, Windows Hello or your device PIN), so it counts as two factors on its own. 2FA keeps protecting your password sign-ins.
On the Security page, confirm your password and click Turn off two-factor authentication. This also resets your authenticator key and invalidates all recovery codes — re-enabling later starts fresh.
If your account has no password and you sign in only through a connected Google or Amazon account, your second factor is handled by that provider. Set a password on the Security page first if you'd like MarketplaceHub's own 2FA as well.
Tell us what you were doing and what happened — the notification text or a product SKU helps us find it fast.
