A journal is the one app where a guessed or shared password costs the most. I wanted a second thing standing between someone who knows your password and what you wrote.

So Pensio now has Two-Factor Authentication. You scan a code with any authenticator app. If you do not have one, the setup screen now points you to a short list, grouped by where your codes would live, starting with Apple Passwords, which is already on your iPhone, iPad and Mac. From then on every way in asks for the six digits it shows: your password, Google, Apple, even a password reset link. You also get backup codes for the day your phone is gone, a security log written in plain sentences, and an email when something important changes, like two-factor being turned off.

Turning it off asks for the code too, so someone who only has your password cannot quietly remove it.

Open Settings, then Account, and choose Enable 2FA.

One honest limit: if you lose both your phone and your backup codes, there is no automatic way back in. Keep the codes somewhere safe.

— Gabriel