How to enable 2FA for your Notion account
Updated August 4, 2026
Two-factor authentication (2FA) protects your Notion account even if your password leaks. Follow the steps below to generate Notion verification codes with the Authenticator App on your iPhone, iPad or Mac.
Open your Notion settings
Sign in to Notion on the web and open Settings from the left sidebar, then select your name/account at the top of the settings menu.

Turn on 2-step verification
In the Account security section, switch on 2-step verification (you may see this as an Add verification method action depending on your version).

Choose the authenticator option
Select Code from authenticator as your verification method. In some regions this is the only option offered.

Display the QR code
Notion now shows a QR code that contains your secret key. Leave this page open on screen while you reach for your phone.

Scan the QR code with your Authenticator App
Open the Authenticator App on your iPhone, tap the + button, and hold your phone up to scan the QR code shown by Notion. If you can't scan it, enter the secret key manually instead.

Save the account in the app
After the scan, the Authenticator App fills in the Notion logo, account name, and secret key automatically. Tap Save in the app to store the new entry.

Name the method
Back on the Notion web page, type a name for this authentication method so you can recognize it later, then click Continue.

Enter the verification code
Type the 6-digit one-time code from your Authenticator App into the field on Notion, then click Verify code to confirm.

Save your backup codes
Two-step verification is now on. If this is your first method, Notion shows a set of backup codes. Save them somewhere safe (each works only once), then press I've saved them to finish.

Backup & recovery
Two-step verification is now on. If this is your first method, Notion shows a set of backup codes. Save them somewhere safe (each works only once), then press I've saved them to finish.
That's it — your Notion account is now protected with two-factor authentication. Keep your recovery information safe and follow the service's official documentation if its interface changes.

