You scanned the QR code for two-factor authentication and saved your profile, but the site still says you need to set up two-factor authentication.
Why this happens. Two-factor authentication only activates when the confirmation code and the checkbox are submitted together in a single save. Scanning the QR code alone, or ticking the checkbox without entering a code, saves as not enabled without showing an error. That is why the setup appears to be accepted but nothing changes.
How to enable it. Do all four of these before clicking save:
- Scan the QR code with your authenticator app (Google Authenticator, Authy, and 1Password all work).
- Type the current 6-digit code into the Confirm code to enable box.
- Tick the Enable two-factor authentication checkbox.
- Click Update Profile.
Two things cause failure even when the steps look right.
The code expires after 30 seconds. Read it off your phone immediately before clicking save rather than using a code you copied a minute earlier.
A stale entry in your authenticator app will never work. If you previously tried to enable two-factor and then turned it off, or if support reset your setup, the old entry in your app no longer matches the site. Delete that entry, reload the profile page, and scan the new QR code before entering a code.
If you are stuck in the loop with no way to proceed, contact support. Support can clear the setup so you get a fresh QR code. Doing so does not log you out or require a password reset.