Should I enable two-factor authentication?

Yes — especially if you sell, because your account can move money.

Turn it on in Account → Settings → Two-factor sign-in. You'll need an authenticator app: 1Password, Authy, Google Authenticator or the one built into your password manager. Scan the QR code (or type the key it shows), then enter the six-digit code to confirm. From then on, signing in asks for a code as well as your password.

Save the key in a password manager that syncs across your devices. If you only have it on one phone and lose that phone, you'll need to contact support and prove who you are before we remove it.

To switch it off, go back to the same place and enter a current code — we ask for one so that someone who walks up to an unlocked laptop can't quietly remove it.