Two-factor authentication (also called MFA) adds a second step when you sign in: a 6-digit code from an app or a text message. It keeps your manuscripts safe even if someone learns your password.
When it's required
MFA is optional for writing. You'll be asked to set it up before you:
share a manuscript or give someone access to it,
export your manuscript or your worldbuilding, or
invite beta readers.
At that point a Secure your account first message appears. Set up now takes you straight to the right place. Until then you may see a reminder banner, which you can snooze.
Before you begin
For security, adding MFA needs a recent sign-in. If you see a message saying the action requires a recent sign-in, sign out, sign back in, and start again.
Setting it up
Go to Settings → Security.
Scroll to Multi-Factor Authentication (MFA) and click Add MFA Method.
Choose a method:
Authenticator App (TOTP), recommended: codes from an app such as Google Authenticator, Authy or 1Password. Works offline.
SMS Text Message: a code sent to your mobile phone.
Follow the steps on screen. For an authenticator app, scan the QR code with your app. For SMS, enter your phone number.
Enter the 6-digit Verification Code to finish.
Once a method is added, the card's label changes from Not set up to On.
You can add more than one method, which is a good idea in case you lose a device. You can't remove your only method, so add a replacement first.
No phone? Use a desktop authenticator
You don't need a smartphone. Several authenticator apps run on your computer:
KeePassXC (Mac, Windows, Linux): free and open source.
1Password (Mac, Windows, Linux): paid; includes a built-in authenticator.
Bitwarden (Mac, Windows, Linux, browser extension): the authenticator needs Bitwarden Premium.
To set one up, choose Authenticator App (TOTP). Under the QR code you'll see If you cannot scan QR codes, you can copy this secret key manually. Copy that key, add a new entry in your desktop app, paste the key in, and name it "Writing Crucible". Then type the app's current 6-digit code into Writing Crucible.
Backup recovery codes
In the same section of Settings → Security, Generate Codes creates single-use recovery codes. If you lose access to your phone or authenticator app, you can sign in with one of them. Store them somewhere safe, such as a password manager or a printed copy.
Need help?
If you get stuck setting up MFA, contact our support team and we'll help you get set up.