Two-factor sign-in and sessions

1. Settings → Account & security → Turn on two-factor sign-in.
2. Scan the QR code with an authenticator app and enter the code.
3. Keep the backup codes somewhere safe; each works once.

The same page lists where you're signed in. Sign out one device or every other device at once. Changing your password also signs out every other device.