# Set up two-factor authentication (2FA)

Two-factor authentication (2FA) adds a one-time code from an authenticator app on top of your password.

## Before you start

Install an authenticator app on your phone (Google Authenticator, Microsoft Authenticator, Authy, or 1Password).

## Steps

1. Go to **Settings → Security → Two-factor** and click **Set up**.
2. In your authenticator app, **scan the QR code** shown. Can't scan? Copy the **setup key** and enter it manually.
3. Your app now shows a 6-digit code that refreshes every 30 seconds. Enter the current code and click **Verify & enable**.
4. **Save your recovery codes** somewhere safe — they let you sign in if you lose your phone.

## Turn it off

Go to **Settings → Security → Two-factor** and confirm with a current code to disable it.

## Other options

- **Email two-step verification** — get a one-time sign-in code by email instead.
- **Passkeys** — sign in with Face ID / Touch ID / a security key (see *Add a passkey*).

## Troubleshooting

- **"Invalid code"** — your phone's clock may be off; enable automatic time, then try the newest code.
- **Lost your device?** — use a recovery code, or contact support with your **support PIN**.

**Related:** Add a passkey · Set your support PIN · Log in to Orvoro