Loading the new Help Center

Set up two-factor authentication for your Todoist account

Available for:
Free
Premium
Business

You want to feel safe and secure in everything you do in life, particularly when it comes to your personal data. That’s why we’ve implemented several security measures to protect your Todoist account.

About two-factor authentication

Two-factor authentication or 2FA adds an extra layer of security to your account by requiring you to use a third-party authentication app when logging into your account.

After entering your account email address and password, Todoist will ask for a 6-digit one-time passcode. Your preferred third-party authentication app generates this passcode for you.

Head of Customer Experience If you don’t already have an authentication app, like Authy or Google Authenticator, make sure to install one on your mobile device.

If you’ve enabled 2FA on your account, you’ll be prompted to use a one-time passcode for a variety of actions:

  • Log in to your Todoist account
  • Turn off 2FA
  • Change your email address in your Todoist account
  • Download a backup of your account
  • Delete your Todoist account
  • View your recovery codes
If you’ve lost access to your authentication app and the one-time passcode, learn how to request a recovery code.

Todoist supports authentication apps installed on your mobile device. If you don’t already have an authentication app, like Authy or Google Authenticator, make sure to install one before setting up 2FA for your account.

Turn on two-factor authentication

  1. Log in to Todoist in a browser.
  2. Click your avatar in the top-left.
  3. Click Settings.
  4. Select Account in the left-hand menu.
  5. Click the toggle below Two-factor authentication.
  6. Scan or copy the secret code you see to your authentication app.
  7. Enter the verification code. You'll see a confirmation notice that verification is complete.
  8. Click Continue in the bottom-right side.
  9. Scroll down to Save your recovery codes and click Copy all codes.
  10. Click Continue.
Save your recovery codes in a secure place. If you ever get logged out of your account, you may need them to get back in.
  1. Tap on Browse in the bottom-right.
  2. Tap the gear icon in the top-right.
  3. Select Account.
  4. Tap the Require 2FA toggle.
  5. Copy the secret code you see to your authentication app.
  6. Enter the verification code in Todoist.
  7. Tap Done in the top-right corner, and you'll see Verification successful.
  8. Scroll down to Save your recovery codes and tap Copy all codes.
  9. Tap Done in the top-right corner.
Save your recovery codes in a secure place. If you ever get logged out of your account, you may need them to get back in.
  1. Tap on Browse in the bottom-right.
  2. Tap the gear icon in the top-right.
  3. Select Account.
  4. Tap the Two-factor authentication toggle.
  5. Copy the secret code you see to your authentication app.
  6. Enter the verification code in Todoist, and you'll see Verification successful.
  7. Scroll down to Save your recovery codes and tap Copy all codes.
  8. Tap Done in the top-right corner.
Save your recovery codes in a secure place. If you ever get logged out of your account, you may need them to get back in.

2FA is now enabled on your account. If you don’t see your 2FA settings, learn how to troubleshoot this issue.

Turn off two-factor authentication

  1. Log in to Todoist in a browser.
  2. Click your avatar in the top-left.
  3. Click Settings.
  4. Select Account in the left-hand menu.
  5. Scroll down to Two-factor authentication and toggle the setting Off.
  6. Enter a one-time passcode from your authentication app.
  1. Tap on Browse in the bottom-right.
  2. Tap the gear icon in the top-right.
  3. Select Account.
  4. Use the toggle under Two-factor authentication to disable 2FA.
  5. Enter a one-time passcode from your authentication app.
  1. Tap on Browse in the bottom-right.
  2. Tap the gear icon in the top-right.
  3. Select Account.
  4. Use the toggle to the right of Two-factor authentication to turn off 2FA.
  5. Enter a one-time passcode from your authentication app.
If you no longer have access to your third-party authentication app to get the one-time passcode, learn how to request for a recovery code. Then, toggle two-factor authentication off, click Click here to use a recovery code instead, and enter the code to turn off 2FA.

Get more help

If you’re having trouble setting up or using two-factor authentication for your Todoist account, learn how to troubleshoot issues with your 2FA setup.

Physical security keys for 2FA aren’t supported yet. Share this as a feature request.