Set up two-factor authentication

How to get there: Click your avatar in the top-right corner → Edit profile → scroll to Two-Factor Authentication.

Two-factor authentication (2FA) adds a second step to your login. After entering your password, you confirm your identity with a one-time code from an authenticator app (Google Authenticator, 1Password, Authy, etc.).

Enable 2FA

  1. Open your profile and scroll to the Two-Factor Authentication section.
  2. Click Enable two-factor authentication.
  3. Scan the QR code with your authenticator app. If you cannot scan the code, click the manual-key option and type the key into your app instead.
  4. Your recovery codes are displayed. Copy or download them and store them somewhere safe. They will not be shown again after you leave this step.
  5. Click I've saved these codes to finish setup.

2FA is now active on your account.

Log in with 2FA

  1. Enter your email and password as usual.
  2. A second screen asks for your authentication code.
  3. Open your authenticator app, find the ProductLift entry, and enter the six-digit code.
  4. (Optional) Check Trust this device for 30 days so you are not prompted for a code on this browser for the next 30 days.

Use a recovery code

If you lose access to your authenticator app, click Use a recovery code instead on the login prompt and enter one of the recovery codes you saved during setup.

Each recovery code can only be used once. After using a code, it is permanently consumed. If you are running low on unused codes, regenerate a new set from your profile (see below).

Regenerate recovery codes

  1. Open your profile and scroll to the Two-Factor Authentication section.
  2. Click Regenerate recovery codes.
  3. Enter your password and a code from your authenticator app.
  4. A new set of recovery codes is displayed. Save them. All previous codes are invalidated immediately.

Revoke trusted devices

If you marked a device as trusted and want to require a code again on all devices (for example, after losing a laptop), click Revoke trusted devices in your profile. Every browser that was previously trusted will prompt for a code on the next login.

Disable 2FA

  1. Open your profile and scroll to the Two-Factor Authentication section.
  2. Click Disable.
  3. Enter your password and a TOTP code (or a recovery code) to confirm.

2FA is removed from your account. You will only need your password to log in from this point on.

Made with ProductLift