Multi-Factor Authentication

Overview

Multi-factor authentication (MFA) adds an extra layer of security to your account. Even if someone obtains your password, they cannot access your account without the one-time code generated by your authenticator app.

What is MFA

MFA uses time-based one-time passwords (TOTP) — a 6-digit code that refreshes every 30 seconds. This code is generated by an authenticator app on your phone or desktop and is required in addition to your password when logging in.

Setting Up MFA

1. Go to Settings → Security.
2. Click Enable MFA.
3. Scan the QR code with your authenticator app (Google Authenticator, Authy, 1Password, or similar).
4. Enter the 6-digit code from your app to confirm the setup.
5. Save your recovery codes in a safe place — they can be used to regain access if you lose your device.

Using MFA

1. Enter your email and password on the login page.
2. You will be redirected to a verification page.
3. Open your authenticator app and enter the current code.
4. Click Verify to complete the login.

Disabling MFA

To disable MFA, go to Settings → Security and click Disable MFA. You will need to provide a current code or recovery code to confirm.