> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.heartsome.co/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Setting up two-factor authentication (2FA)

Two-factor authentication adds an extra layer of security to your account. In addition to your password, you enter a code from an app on your phone when logging in. Even if someone knows your password, they won’t be able to log in.

#### What do you need?
* An authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or your password manager’s built-in authenticator.
* A password for Heartsome. If you always log in with Google or Microsoft and haven’t set a password yet, set one first via **Forgot password?** on the login screen.

#### Enabling two-factor authentication
1. Click your name at the bottom of the left menu and choose **My settings**.
2. Click **Two-Factor Auth**.
3. Heartsome will ask you to confirm your password first. Enter it and continue.
4. Click **Enable 2FA**.
5. Scan the QR code with your authenticator app. If scanning doesn’t work, manually enter the code shown below the QR code.
6. Click **Continue**.
7. Enter the 6-digit code your app shows and click **Confirm**.

You’ll now see the label **Enabled**. From your next login, Heartsome will ask for a code from your app after your password.

#### Save your recovery codes
Once two-factor authentication is on, you’ll see your recovery codes on the same page. Recovery codes let you access your account if you lose your phone or get a new one.
* Click **View Recovery Codes** and save them somewhere safe, preferably in your password manager. Don’t store them only on the phone where your authenticator app is installed.
* Each code can only be used once. After use, it disappears from the list.
* Running low on codes, or think someone may have seen them? Click **Regenerate Codes** to get new ones. Your old codes will stop working immediately.

#### Logging in with two-factor authentication
1. Log in with your email address and password.
2. Enter the **Authentication code** shown in your app.

Don’t have your phone with you? Click **log in with a recovery code** and enter one of your recovery codes.

#### Disabling two-factor authentication
Go to **My settings → Two-Factor Auth** and click **Disable 2FA**. If you want to turn it back on later, you’ll scan a new QR code.

#### Good to know
Two-factor authentication applies when you log in with your email address and password. If you log in with Google or Microsoft, the security settings of that account apply. Make sure to enable two-factor authentication there as well.