> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.faaaster.io/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# How do I turn on two-factor authentication on Faaaster?

Open your **Profile**, **Two-factor authentication** section, and click **Turn on**. From then on, in addition to your password, Faaaster asks at every sign-in for the 6-digit code from your authenticator app: even with a stolen password, no one can get into your account.

> **Prerequisites** — an authenticator app on your phone (Google Authenticator, Microsoft Authenticator, 1Password…) and a verified email address.

## Contents

- [Turn on two-factor authentication](#2-turn-on-two-factor-authentication)
- [Sign in with the code](#2-sign-in-with-the-code)
- [When is the code asked?](#2-when-is-the-code-asked)
- [Turn off two-factor authentication](#2-turn-off-two-factor-authentication)
- [I lost my phone](#2-i-lost-my-phone)

## Turn on two-factor authentication

1. Click your initials at the top right of the screen, then **My profile**.
2. In the **Two-factor authentication** section, **Authenticator app** row, click **Turn on**.
3. Enter your **Password**, then click **Continue**. If you signed up with GitHub, click **Confirm with GitHub**.
4. Scan the QR code with your authenticator app. If you can't scan it, type in the key shown below the QR code.
5. Enter the 6-digit code shown by the app in **Verification code**. It is sent on its own at the sixth digit; you can also click **Turn on**.

Faaaster then signs you out of all your devices, including the VS Code extension. Sign in again with your password and the code from your app: the **Authenticator app** row now shows **On**. You also receive an email confirming the activation.

> If Faaaster shows "Before turning on two-factor authentication, please verify your email address.", click **Send the verification link**, verify your address from the email you receive, then start again.

## Sign in with the code

1. On the login page, enter your email and password, then click **Log in** (or use **Login with GitHub**).
2. The **Two-factor authentication** window opens: enter the 6-digit code from your app. You can also paste it.

If the code is refused, make sure your phone's clock is correct, then enter the code shown at that moment: it changes every 30 seconds. After too many attempts, wait a few minutes.

## When is the code asked?

- at every sign-in;
- when you confirm your password to edit your profile or your organization settings;
- to turn off two-factor authentication.

It is never asked again while you work: managing your sites, opening WordPress from Faaaster or any other action.

## Turn off two-factor authentication

1. Open your **Profile**, **Two-factor authentication** section.
2. Click **Turn off**.
3. Enter your **Password**, click **Turn off**, then enter the code from your app.

Your account is then protected by your password only.

## I lost my phone

Without your app, you can no longer sign in. Contact Faaaster support: they can remove two-factor authentication from your account. You will then sign in with your password alone, and can turn it back on with your new phone.

> **You didn't turn on two-factor authentication yourself?** The confirmation email contains a link to remove it. Then change your password right away.

👉 [How do I log in to Faaaster?](https://help.faaaster.io/en-us/article/log-in-z6vjxs/) · [How do I reset my password?](https://help.faaaster.io/en-us/article/reset-your-password-15cluzz/) · [I can't log in](https://help.faaaster.io/en-us/article/cant-log-in-1hzf78m/)