Step by step
Turn on two-factor authentication
Add an authenticator app so a stolen password alone is not enough to open your library and manuscripts.
- Time
- 3 minutes
- Steps
- 5
With two-factor authentication on, signing in on a new device needs your password and a 6-digit code from an app on your phone. Two-factor protects your library and manuscripts, not just billing, and it applies however you sign in, including with Google.

Step 1Open Settings, then Security
Choose Settings (the gear in the rail, bottom left), then Security. You can also open the account menu (your initials, top right) and choose Security.
The first card says Two-factor authentication is off. Choose Set up.

Step 2Scan the code with your app
Set up two-factor authentication opens at Step 1 of 3. In your authenticator app, add an account and scan the QR code under Scan with your app.
Can't scan it? Under Can't scan it?, choose Copy beside the setup key and enter the key in your app by hand.
Tick Trust this device for 30 days after setup if this is your own computer, so you aren't asked for a code here for 30 days. Leave it unticked on a shared computer.
Then choose I've scanned it. (Do this later leaves two-factor off; you can come back to it in Settings → Security.)

Step 3Enter the code from your app
Type the 6-digit code your app shows for CurTask, and choose Turn on two-factor. A new code appears in the app every 30 seconds; any current one works.
Step 4Save your recovery codes
CurTask now shows Save your recovery codes: 10 codes, each of which works once. They get you in if you lose your phone. Choose Download .txt or Copy all, and keep them somewhere other than your phone.
Tick I've saved these codes somewhere safe and choose Finish setup. You will see Two-factor authentication is on.
Step 5What changes when you sign in
On a new device, after your password, CurTask asks you to Enter your code: open your app and type the 6-digit code for CurTask. Tick Trust this device for 30 days on your own computer to skip the code there for 30 days.
Tip: to see or stop trusting your devices, go to See and sign out your devices.
What's next
- Use a recovery code if you lose your phone.
- To move to a new authenticator app, choose Turn off in Settings → Security, then set up two-factor again. Anyone with your password could open your account while it is off, so set it up again straight away.