Turn on two-factor authentication

1. Open Account → Security and click Enable two-factor.
2. Scan the QR code with an authenticator app (1Password, Authy, Google Authenticator).
3. Enter the 6-digit code and save your recovery codes somewhere safe.

Owners can require two-factor for everyone in Settings → Security.