Setting up two-factor authentication (2FA)

Two-factor authentication adds an extra layer of security to your account. In addition to your password, you enter a code from an app on your phone when logging in. Even if someone knows your password, they won’t be able to log in.

What do you need?

• An authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or your password manager’s built-in authenticator.
• A password for Heartsome. If you always log in with Google or Microsoft and haven’t set a password yet, set one first via Forgot password? on the login screen.

Enabling two-factor authentication

1. Click your name at the bottom of the left menu and choose My settings.
2. Click Two-Factor Auth.
3. Heartsome will ask you to confirm your password first. Enter it and continue.
4. Click Enable 2FA.
5. Scan the QR code with your authenticator app. If scanning doesn’t work, manually enter the code shown below the QR code.
6. Click Continue.
7. Enter the 6-digit code your app shows and click Confirm.

You’ll now see the label Enabled. From your next login, Heartsome will ask for a code from your app after your password.

Save your recovery codes

Once two-factor authentication is on, you’ll see your recovery codes on the same page. Recovery codes let you access your account if you lose your phone or get a new one.

• Click View Recovery Codes and save them somewhere safe, preferably in your password manager. Don’t store them only on the phone where your authenticator app is installed.
• Each code can only be used once. After use, it disappears from the list.
• Running low on codes, or think someone may have seen them? Click Regenerate Codes to get new ones. Your old codes will stop working immediately.

Logging in with two-factor authentication

1. Log in with your email address and password.
2. Enter the Authentication code shown in your app.

Don’t have your phone with you? Click log in with a recovery code and enter one of your recovery codes.

Disabling two-factor authentication

Go to My settings → Two-Factor Auth and click Disable 2FA. If you want to turn it back on later, you’ll scan a new QR code.

Good to know

Two-factor authentication applies when you log in with your email address and password. If you log in with Google or Microsoft, the security settings of that account apply. Make sure to enable two-factor authentication there as well.

Updated on: 14/10/2026