Two-factor authentication

What it is, who needs it, and how to set it up.

Updated Sep 12, 2026
In this topic · Getting started

What it is

Two-factor authentication asks for a six-digit code from an app on your phone after your password. A stolen password alone is then not enough to get in.

Who needs it

  • Management accounts (staff, directors, owner): required at every sign-in. You cannot remove your last authenticator.
  • Investors and applicants: optional, and recommended.

Setting it up

  1. Go to Account → Security.
  2. Install an authenticator app (Google Authenticator, 1Password, Authy or similar) if you do not have one.
  3. Choose Set up two-factor and scan the QR code with the app, or type the key by hand.
  4. Type the six-digit code the app shows and choose Confirm.

Setting up two-factor signs out your other devices, so each signs in again with a code.

Lost your phone?

See Two-factor problems.

Did this not answer it? Search again or use the contact form.