← Two-factor authentication

MFA Setup v2

auth / security · features · two-factor authentication

Wizard for setting up two-factor authentication (TOTP).

Wireframe
step 1 · connect the app
achilles.local/account/security/mfa /account/security/mfa · after login
A Achilles
Member DS
1 2 3

Scan the QR code

Open your authenticator app (Google Authenticator, 1Password, Authy) and point the camera at it.

Or enter the key manually
JBSW Y3DP EHPK 3PXP 1
Achilles · dmitry@company.com 2
step 2 · confirm the code
achilles.local/account/security/mfa /account/security/mfa · after login
A Achilles
Member DS
1 2 3

Enter the code from the app

The 6-digit code refreshes every 30 seconds.

4 2 9 1 0 7
Verified on the server before activation 3
← Back to the QR code
step 3 · recovery codes
achilles.local/account/security/mfa /account/security/mfa · after login
A Achilles
Member DS
1 2 3

Save your recovery codes

Each code is single-use. With one, you can sign in if you lose access to the app.

4f9a-2b7c8d1e-5a3f c0b6-9e247a2d-1f8b e3c5-0d942b8f-6a17 9d4e-3c0a5f1b-7e62 a6c3-8d090e7a-4b25
Download .txt · Print Shown once 4
I've saved the codes somewhere safe 5
  1. 1 A key for manual entry — an alternative to the QR on devices without a camera.
  2. 2 The issuer and account under which the app will show the codes.
  3. 3 The code is verified on the server before activation. The mechanic is in authentication.
  4. 4 Single-use recovery codes in case the device is lost; shown once.
  5. 5 MFA is enabled only after confirming the codes are saved — protection against self-lockout.