Security & Two-Factor Authentication

Two-factor authentication (2FA)

2FA adds an extra verification step when you log in. After your password, you'll enter a code from an authenticator app.

Setting up 2FA

1. Go to Dashboard → Security
2. Click Enable Two-Factor Authentication
3. Open an authenticator app (Google Authenticator, Authy, or any TOTP app)
4. Scan the QR code
5. Enter the 6-digit code to verify
6. Save your backup codes

Backup codes

You receive 8 single-use backup codes during 2FA setup. Store them safely — you'll need them if you lose access to your authenticator app.

Disabling 2FA

1. Go to Security
2. Click Disable 2FA
3. Enter your password to confirm

Active sessions

View and revoke devices that are currently logged into your account:

1. Go to Security → Sessions
2. Review the list of active sessions
3. Click Revoke on any session you don't recognise

If you see an unrecognised session, change your password immediately.