Two-Factor Authentication

Two-factor authentication (2FA) adds a second layer of protection to your account. Even if someone obtains your password, they cannot access your account without the second factor.

What is Two-Factor Authentication?

Two-factor authentication requires two forms of verification to log in:

1. Something you know — Your password
2. Something you have — A verification code from your phone

This means that even if your password is compromised, your account remains secure.

Setting Up 2FA

1. Go to Settings then Security
2. Click Enable Two-Factor Authentication
3. Choose your preferred method:
   • Authenticator App (recommended) — Use an app like Google Authenticator, Authy, or 1Password
   • SMS — Receive codes via text message
4. Follow the on-screen instructions to complete setup
5. Save your recovery codes — Store them in a safe place

Using an Authenticator App

1. Download an authenticator app on your phone
2. Scan the QR code displayed on screen
3. Enter the 6-digit code from the app to verify
4. Two-factor authentication is now active

Logging In with 2FA

After enabling 2FA, your login process adds one step:

1. Enter your email and password as usual
2. When prompted, open your authenticator app
3. Enter the current 6-digit code
4. Click Verify

Codes refresh every 30 seconds. If a code expires, wait for the next one.

Recovery Options

If you lose access to your 2FA device:

Recovery Codes

When you set up 2FA, you receive a set of one-time recovery codes. Each code can be used once to log in without your 2FA device.

• Store recovery codes securely (password manager or printed copy)
• Each code works only once
• You can generate new recovery codes from Settings

Contact Support

If you have used all recovery codes and lost your 2FA device:

1. Contact your service provider
2. They will verify your identity through alternative means
3. Once verified, 2FA will be temporarily disabled so you can log in and reconfigure it