How do I turn on two-step sign-in?

Two-step sign-in asks for a six-digit code from an authenticator app as well as your password, so a stolen password alone cannot open your account.

Go to My account, then Security, and follow the steps to scan the code with an authenticator app. Save the recovery codes somewhere safe: they are the way back in if you lose your phone.

Staff accounts are encouraged to turn this on.