Two-Factor Authentication (2FA)

Protect your account with TOTP-based two-factor authentication and recovery codes.

Contents

Two-Factor Authentication (2FA)

Two-factor authentication (2FA) adds an extra layer of security to your account. In addition to your password, you need a time-based code from an authenticator app.

Overview

PropertyDetails
MethodTOTP (Time-based One-Time Password)
Compatible appsGoogle Authenticator, Authy, 1Password, Bitwarden, and others
Recovery codes8 one-time codes as backup
Google OAuth2FA is skipped for Google login (Google manages security)

Setting Up 2FA

  1. Navigate to Settings > Security
  2. Click Enable 2FA
  3. Scan the QR code with your authenticator app
    • Alternatively: Enter the secret key manually
  4. Enter the 6-digit code from the app
  5. Confirm the setup

Saving Recovery Codes

After setup, you receive 8 recovery codes in the format XXXX-XXXX-XXXX:

  • Copy the codes to the clipboard
  • Download the codes as a text file
  • Confirm with the checkbox that you have saved the codes

Each recovery code can only be used once and replaces the 6-digit code during login.

Logging In with 2FA

  1. Enter your email and password
  2. After successful password verification, the 2FA input appears
  3. Enter the 6-digit code from your authenticator app
  4. Alternatively: Switch to Recovery Code and enter one of your backup codes

Disabling 2FA

  1. Navigate to Settings > Security
  2. Click Disable 2FA
  3. Enter your password for confirmation
  4. 2FA is immediately disabled

Frequently Asked Questions

What happens if I lose my phone?

Use one of your recovery codes during login. Afterwards, disable 2FA and set it up again with a new device.

Does 2FA work with Google login?

No. If you sign in via Google OAuth, 2FA is skipped. Google manages the security of your account in that case.

Can I generate new recovery codes?

Disable 2FA and set it up again. You will then receive new recovery codes.

dVersum Tip

Enable 2FA for all accounts with access to sensitive business data. Store the recovery codes in a safe place -- for example, in a password manager.

Last updated: 4/6/2026