Two-factor authentication adds a second step to your login: a one-time code from an app on your phone. Even if someone learns your password, they cannot log in without your phone.

Install an authenticator app on your phone, for example Google Authenticator or Authy.
Open Account → Security. Next to Two-factor authentication (TOTP) click Enable.
Scan the QR code with the app, or enter the key shown under Or enter this key manually. Click Next: only then we send a code to your email.
Enter the 6-digit code from the app and the code from the email. Click Verify & enable, then Done.

Write down the key from step 3 and keep it offline in a safe place. With it you can add your account to a new phone. Strade does not issue backup codes.

What changes after you turn it on:

Login asks for the code from the app instead of the email code.
Withdrawals, API keys and security settings ask for both the email code and the code from the app.
You get a notification and an email that 2FA is on. Turning it on for the first time does not block withdrawals.

See also: How do I change or turn off 2FA? and I lost access to my authenticator app.

Stay safe: Strade support never asks for your password, 2FA codes or seed phrase. Never share the key or a code from the app with anyone.

How do I turn on two-factor authentication (2FA)?