# Turn on two-factor authentication

> Add a second check at sign-in with an authenticator app or an email code, and turn it off again.

Two-factor authentication asks for a 6-digit code after your password, so a stolen password alone cannot open your account. You turn it on from **Settings**.

## Pick a method

The **Security** card offers two ways to get the code:

- **Authenticator app.** You need an authenticator app on your phone that makes time-based codes.
- **Email code.** We send the code to your email at sign-in. You need nothing extra.

## Turn it on with an authenticator app

1. **Open Security**

   In the sidebar, select **Settings**, then go to the **Security** card. **Two-Factor Authentication** shows a **Disabled** badge.

2. **Start setup**

   Select **Set Up Authenticator App**. You go to a screen with the same title.

3. **Scan the QR code**

   Under **Step 1**, scan the QR code with your app. If you cannot scan, select **Can't scan? Enter key manually** and type the key into the app.

4. **Enter the code**

   Under **Step 2**, enter the 6-digit code from your app, then select **Confirm Setup**.

![The Security card in Settings showing Two-Factor Authentication with a Disabled badge and the setup buttons](https://docs.reinvestorhub.ai/images/manage-your-account/security-card.png)

*Two-Factor Authentication in the Security card, before setup.*

> **What you should see:** you return to **Settings** with "Authenticator app configured successfully!". **Two-Factor Authentication** shows **Enabled**, and says time-based codes are required at login.

If you leave setup part way, you see "Authenticator app setup was cancelled." Select **Complete Authenticator Setup** to finish.

## Turn it on with an email code

1. **Open Security**

   In **Settings**, go to the **Security** card.

2. **Enable it**

   Select **Enable Email OTP**.

> **What you should see:** "Email OTP enabled successfully!", and **Two-Factor Authentication** shows **Enabled** and says a code is sent to your email at login.

## Signing in afterwards

Enter your email and password as usual. A verification screen then asks for the code: "Enter the 6-digit code from your authenticator app", or "Enter the 6-digit code sent to your email". Enter the six digits and select **Verify**.

Got a new phone? Select **Reconfigure Authenticator** in the **Security** card and scan the new QR code.

## Turn it off

1. **Select Disable MFA**

   In the **Security** card, select **Disable MFA**.

2. **Confirm**

   The **Disable Two-Factor Authentication** dialog warns that you will only need your password to log in. Select **Disable MFA** again.

> **You may be asked to sign in again:** You must have signed in recently to turn this off. If not, you see "Please sign in again to disable multi-factor authentication." and go to the sign-in screen. After you sign in, you return to **Settings** with the dialog open. Select **Disable MFA** to finish.

> **What you should see:** "MFA disabled successfully!" and a **Disabled** badge.

## If you lose access to your code

If you lost your phone or cannot get the email code, you cannot turn two-factor authentication off yourself, because that needs you to sign in. [Contact support](https://docs.reinvestorhub.ai/help/contact-support/) for help.

> **Note:** For a short comparison of the two methods, see [Two-factor authentication](https://docs.reinvestorhub.ai/reference/your-account/two-factor-authentication/).

## Next step

  - [Change your password](https://docs.reinvestorhub.ai/guides/manage-your-account/change-your-password/): Update your password from the same Security card.
  - [Contact support](https://docs.reinvestorhub.ai/help/contact-support/): Locked out? We can help.