Two-factor authentication setup

Enable 2FA in 60 seconds

Settings → Security → "Enable two-factor authentication"

1. Scan the QR code with Google Authenticator, 1Password, Authy, or any TOTP app
2. Enter the 6-digit code to confirm setup
3. Save the 8 recovery codes somewhere safe — they're your fallback if you lose your phone

Required for admins

The platform enforces 2FA for any user with admin role. You'll be redirected to setup on first login.

Recovery flow

If you lose your TOTP device:

1. Use a recovery code to log in (each works once)
2. Reset 2FA from Settings → Security → "Reset 2FA"
3. New QR code + new 8 recovery codes

If you've lost both your TOTP device AND recovery codes, contact support — we require email + government-ID verification to reset 2FA on admin accounts.