Email confirmation is enabled by default. At least one code method — email, authenticator app or Telegram — must always stay enabled; a passkey doesn't count toward this.
A confirmation code is required for:
inviting new users;
making payments.
creating API-token
You can enable additional confirmation methods.
Enabling 2FA
Go to the Settings -> General section.
Enable 2FA verification — it will be used both for login and for confirming actions.
Refresh the page.
After refreshing, the Authentication app option will become available in the confirmation methods block.
Select it.
After selecting this method, a modal window will appear — enter the code from your authentication app (for example, Google Authenticator) and confirm the action.
Enabling Confirmation via Telegram
Go to the Settings -> General section.
Link the Telegram bot.
Refresh the page.
The Telegram option will appear in the Confirmation methods block.
Select this method.
The confirmation code is valid for 5 minutes.
After selecting it, a modal window will appear — enter the code you receive in the Telegram bot.
Enabling Passkey
You can also confirm actions with a Passkey. Set each one up in the Settings -> General section, refresh the page, then select the new option in the Confirmation methods block. As with other methods, you'll be asked to confirm each action.