Two-factor authentication
Setting up TOTP, storing recovery codes and what to do if you lose the device.
Last updated 1 August 2026
Two-factor authentication uses a time-based one-time code from an authenticator application. It is optional for customers and mandatory for privileged operations roles.
Setting it up
- Open SecuritySecurity in your dashboard, then Two-factor authentication.
- Scan or type the keyScan the QR code, or enter the setup key manually if you cannot scan.
- Confirm a codeEnter a current code to prove the authenticator is configured correctly.
- Store the recovery codesThey are shown once. Keep them somewhere other than the device holding your authenticator.
Recovery codes are shown once
Each code works once and is invalidated individually as it is used. You can regenerate the whole set, which invalidates every previous code.Turning it off
Disabling two-factor authentication requires you to re-enter your password. Every session other than the current one is signed out when it changes.
Was this page useful?
Feedback about article account-security/two-factor-authentication