Two-step sign-in

With two-step sign-in, signing in needs your password and a 6-digit code from an app on your phone. Someone who learns your password still can't get in.

Turn it on

1. Install an authenticator app, such as Google Authenticator, Microsoft Authenticator or 1Password.
2. Go to Account and choose Turn on two-step sign-in. Confirm your password.
3. Scan the QR code with the app (or type the setup key), then enter the code it shows.
4. Save your backup codes. This is the only time they're shown.

We email you whenever two-step sign-in is turned on or off. Turning it on or off also stops every API key and connected app on your account, so anything set up by someone who briefly had your password stops working. Create new keys or reconnect apps from the Account page afterwards.

Signing in

After your password, enter the code from your app. Tick Trust this device for 30 days on your own computer to skip the code there for a while.

Lost your phone?

Choose Use a backup code on the code page. Each of your ten backup codes works once. Signed in, you can make new backup codes from your Account page, and the old ones stop working.

Lost both your phone and your backup codes? Email hello@notestream.link from your account's email address. After checking it's really you, support can switch two-step sign-in off so you can set it up again. That signs you out everywhere and stops your API keys and connected apps.

Google and email links

Two-step sign-in protects signing in with your email and password. Once it's on, Continue with Google can't be used for your account. Sign in with your password and code instead.

If you've only ever used Google, set a password first with Forgot password? on the sign-in page, then turn two-step sign-in on.