# Set up two-factor authentication

> Turn on two-factor authentication with an authenticator app or an email code, sign in with it, and turn it off again.

Two-factor authentication adds a second check when you sign in. After your password, you enter a 6-digit code. You can get that code from an authenticator app on your phone or by email.

> **Note:** The app method needs an authenticator app on your phone (any app that generates time-based codes). The email method needs nothing extra.

## Choose a method

| Method | How it works at sign-in |
|---|---|
| Authenticator app | You open the app and enter the current 6-digit code. |
| Email code | We email a 6-digit code to the address on your account. |

You can have one method on at a time.

## Set up an authenticator app

1. **Open Security settings**

   In the sidebar, select **Settings**, then go to the **Security** card. **Two-Factor Authentication** shows a **Disabled** badge.

2. **Start setup**

   Select **Set Up Authenticator App**. You are taken to a screen titled **Set Up Authenticator App**.

3. **Scan the QR code**

   Under **Step 1**, scan the QR code with your authenticator app. If you cannot scan it, select **Can't scan? Enter key manually** and type the key into the app instead.

4. **Enter the code**

   Under **Step 2**, enter the 6-digit code your app shows. If the screen asks for a **Device name**, enter one, such as My iPhone.

5. **Confirm**

   Select **Confirm Setup**.

> **What you should see:** you return to **Settings** with the message "Authenticator app configured successfully!". **Two-Factor Authentication** shows **Enabled**, and a line saying time-based codes are required at login.

If you cancel part of the way through, the page shows "Authenticator app setup was cancelled." Select **Complete Authenticator Setup** to finish.

## Set up an email code

1. **Open Security settings**

   In **Settings**, go to the **Security** card.

2. **Turn it on**

   Select **Enable Email OTP**.

> **What you should see:** the message "Email OTP enabled successfully!", and **Two-Factor Authentication** shows **Enabled**, and a line saying a code is sent to your email at login.

## Sign in with two-factor authentication

After you enter your password, a screen titled **Two-Factor Verification** asks for your code. It reads "Enter the 6-digit code from your authenticator app", or "Enter the 6-digit code sent to your email" if you use the email method. Enter the six digits to finish signing in.

## Change to a new phone

If you use an authenticator app and get a new phone, select **Reconfigure Authenticator** in the **Security** card and scan the new QR code.

## Turn it off

1. **Select Disable MFA**

   In the **Security** card, select **Disable MFA**.

2. **Confirm**

   The **Disable Two-Factor Authentication** dialog warns that you will only need your password to sign in. Select **Disable MFA** again to confirm.

> **You may be asked to sign in again:** To turn off two-factor authentication you need to have signed in recently. If you have not, you see "Please sign in again to disable multi-factor authentication." and go to the sign-in screen. After you sign in, you return to **Settings** with the confirmation dialog open. Select **Disable MFA** to finish.

> **What you should see:** the message "MFA disabled successfully!" and a **Disabled** badge on **Two-Factor Authentication**.

## Next step

  - [Profile and password](https://docs.reinvestorhub.ai/reference/your-account/profile-and-password/): Change your password from the same Security card.
  - [Notification settings](https://docs.reinvestorhub.ai/reference/your-account/notification-settings/): Choose which alerts you get in the app and by email.