---
title: Two-Factor Authentication
url: "/docs/account/two-factor/"
canonical_url: https://docs.blossom88.com/docs/account/two-factor/
markdown_url: https://docs.blossom88.com/docs/account/two-factor.md
categories:
- security
- user-guide
- authentication
- account-management
---

# Two-Factor Authentication

Two-Factor Authentication (2FA) adds an extra layer of security to your account by requiring a verification code from your phone in addition to your password.

## Setting Up 2FA

1. Go to **Profile** → **Two-Factor Authentication**
2. Click **Enable Two-Factor Authentication**
3. **Download an authenticator app** on your phone:
   - **Google Authenticator** (iOS/Android)
   - **Authy** (iOS/Android)
   - **Microsoft Authenticator** (iOS/Android)
   - **1Password** (Multiple platforms)
4. **Scan the QR code** with your authenticator app
5. Enter the **6-digit code** from your app and your **current password**
6. Click **Confirm and Enable Two Factor**
7. **Save your backup codes** - you'll need these if you lose your phone

## Logging In with 2FA

1. Enter your email and password as usual
2. Enter the **6-digit code** from your authenticator app
3. Click **Verify & Login**

**Lost your phone?** Use one of your **20-digit backup codes** instead.

## Managing 2FA

### Regenerate Backup Codes

If you've used several backup codes or want fresh ones:

1. Go to **Profile** → **Two-Factor Authentication**
2. Click **Regenerate Backup Codes**
3. Save the new codes securely

### Disable 2FA

⚠️ **Warning**: This makes your account less secure.

1. Go to **Profile** → **Two-Factor Authentication**
2. Click **Disable Two-Factor Authentication**

## Troubleshooting

**Code not working?**

- Check your phone's time is correct
- Wait for the next code if the current one just expired
- Make sure you're looking at the right account in your authenticator app

**Lost your phone?**

- Use one of your 20-digit backup codes
- If you've lost both your phone and backup codes, contact support

**Getting a new phone?**

- Before switching: Set up your authenticator app on the new device
- After switching: Use a backup code to log in, then disable and re-enable 2FA

## Important Notes

- **Save backup codes securely** - each can only be used once
- **Don't screenshot backup codes** - write them down or use a password manager
- Codes change every 30 seconds
- Each backup code works only once