Set Up Two-Factor Authentication
Two-factor authentication adds an authenticator app to your sign-in. Set it up in Settings then Profile, in the Security panel, by scanning a QR code and entering the generated code.
Last updated 1 day ago
Two-factor authentication means a password alone is not enough to get into your account. You also need a code from an authenticator app on your phone.
Before you Start
Install an authenticator app if you do not have one. Any app that supports standard time-based codes works, and most password managers include one.
Steps
- Select Settings, then Profile.
- Find the Security panel.
- Find Two-factor authentication and begin setup.
- Scan the QR code with your authenticator app.
- Enter the 6 digit code your app generates.
- Confirm.
From then on, signing in asks for a code from your app after your password.
Who Should Turn This On
Anyone who can access billing. If you are an account owner, your login controls a payment method and a credit balance, which makes it worth the extra step.
Anyone working on client sites. Your NarraSEO account holds publishing credentials for connected websites, and access to those is worth protecting properly.
Notes
Codes change every 30 seconds. If a code is rejected, wait for the next one rather than retrying the same one.
Keep the authenticator app on a device you will not lose access to, and note that changing phone without moving your authenticator entries is a common way to lock yourself out. Most authenticator apps offer a backup or sync option, and turning it on is worth doing before you switch device.
Two-factor authentication is per person, not per workspace. It protects your login across every workspace you belong to.
Turning it on does not affect anyone else on a team account. Each person sets up their own.
If you Lose Access to your Authenticator
Contact support from the email address on the account. Recovering access to an account with two-factor authentication enabled requires verifying who you are, so it is not instant.
This is the reason to set up your authenticator's own backup before you need it.