Two Factor Authentication (2FA) gives your account an extra layer of security. With 2FA, hacking attempts are limited: that is because in addition to needing to hack through your password layer, hackers still need to access your phone to get into your account.
Article structure:
1. How to Activate/Deactivate 2FA as a User
Navigate to the User section, and open the tab Account Security:
![](https://downloads.intercomcdn.com/i/o/354044444/0788cf1d2a19cd337e21d5f2/Screen+Shot+2021-06-23+at+13.53.03.png?expires=1725214500&signature=419a77e070a3b1aa545dcc51c666b39cafb18ca0edccb40d21888fb5eba7543f&req=dyUjFs16mYVbFb4f3HP0gFCYzTQUB2L86RYk47O13Hh%2B2GBAE5ZnA6P1rO0i%0AhGg%3D%0A)
Enable the setting Two-Factor Authentication (2FA), and follow the setup instructions:
![](https://downloads.intercomcdn.com/i/o/354045812/8075fd6ba293c5e65dc1b8c3/Screen+Shot+2021-06-23+at+13.55.16.png?expires=1725214500&signature=99fca08bd0028004ed3e8d36ae1e7afd23e44209ba3da296768c653b225cb7be&req=dyUjFs17lYBdFb4f3HP0gAnQGhkisH6bvTIiHiW5jSBGtRBzoTXXArhaoY0x%0AV9I%3D%0A)
ℹ️ Once successfully activated, you will be given a list of single-use recovery codes. Make sure you save your codes securely! If you lose your phone, you'll need these codes in order to access your account.
You can disable 2FA at any time, by clicking the "disable" button in the setting:
![](https://downloads.intercomcdn.com/i/o/354049032/251a8e652c63243c11533b27/Screen+Shot+2021-06-23+at+14.02.38.png?expires=1725214500&signature=8c13a06ee72d7f1e9fb41faa8e7b9ce4277d77074a65cd37034fccedaee64595&req=dyUjFs13nYJdFb4f3HP0gIdWv8eSnQqgAohzMaFyEYabouSXE7ee7K1%2FKFeh%0Ajxs%3D%0A)
ℹ️ If you have trouble scanning the QR code to set up two-factor authentication for your account, you can still set up this security feature manually. We show you here how it works.
2. How to Enable Mandatory 2FA for Resources
You can make 2FA mandatory for your account. That means, once you enable and save the 2FA setting, all resources will be forced to set up 2FA immediately. They won't be able to access their account until they set it up.
Navigate to Settings, then select Security and click the edit icon. You can activate and deactivate the setting from here.
![](https://downloads.intercomcdn.com/i/o/354051608/a0eae2a0f3927c61d2850716/Screen+Shot+2021-06-23+at+14.06.18.png?expires=1725214500&signature=3a6eb0dcbff1e6751442ab787f1ba4adee4739aee57d76f124130a0368459d51&req=dyUjFsx%2Fm4FXFb4f3HP0gJweaTepxOpeWUlRpLGO4UTmMdJ2xJC8N4tvgFIc%0Ay9Y%3D%0A)
Once set up, if you disable the setting, it stops being mandatory for resources: this means they're able to deactivate 2FA on a user level - as explained above.