Two-factor authentication (2FA)

2FA protects your account even if someone learns your password: signing in and withdrawing money require a code from an app on your phone.

How to enable it

1. Install an app: Google Authenticator, Yandex Key, Microsoft Authenticator or Aegis.
2. Open Security and click "Enable 2FA".
3. Scan the QR code with the app (or enter the key manually).
4. Enter the 6-digit code from the app and click "Confirm".
5. Save your recovery codes — "Download .txt" or "Copy".

When the code is asked

• When signing in — after the password.
• When withdrawing money — only an app code (recovery codes are not accepted).

Limits

Each code is valid for 30 seconds and accepted once. After 5 wrong codes, entry is locked for 10 minutes.

2FA is mandatory for marketplace staff.