Settings → Account → Security → Enable Two-Factor Authentication. Scan the QR code with an authenticator app — Authy, 1Password, Google Authenticator — and enter the 6-digit code to confirm. TOTP only; there's no SMS option, and 2FA is optional on every plan.
01Turn on two-factor
02Save your recovery codes
You get 8 codes in XXXX-XXXX format, shown once, each usable once. Save them somewhere safe. If you lose both your authenticator and your codes, email support@annsa.ai.
03What happens to active sessions
Nothing — existing browser sessions keep working. Two-factor is enforced from your next login.
04Disabling or moving device
Settings → Account → Security → Disable, confirmed with your current code. Lost the app? Log in with a recovery code, then disable and re-enable on the new device.
05Linked sign-in methods
Settings → Account → Security shows which methods are linked — email, Google, GitHub. Unlink any you no longer use, as long as one stays active.