How does two-factor authentication work here?

Two-factor authentication pairs something you know (your password) with something you have (your phone). A stolen password on its own is then useless.

Available methods

• SMS or email passcode — a code sent to your registered contact each time.
• Authenticator app — a code generated on your device, refreshing every 30 seconds. This works without signal and is the stronger option.

Setting up an authenticator app

1. Install an authenticator app on your phone.
2. Sign in and open Profile → Security → Two-factor authentication.
3. Scan the QR code shown, then enter the six-digit code the app generates to confirm the pairing.
4. Save your backup codes somewhere safe and offline. They are your way back in if you lose the phone.

When you will be asked

At sign-in from a new device, when approving payments, when adding a beneficiary, and when changing security settings. Trusted devices may be asked less often for routine sign-in, but never for payments.

Lost your phone?

Use a backup code. If you have none, you cannot self-serve past this point by design — raise a support ticket or call us and we will verify you another way.