Set up authenticator
    Scan the QR code with Google Authenticator or Authy, then enter the 6-digit code.