Skip to content

Security settings: two-factor authentication

Where: Settings > General Settings > Security
Who can use it: Sidebar permission: settings.view or manage settings. No plan or add-on is needed.
Open this page in SureTill

The Security tab showing the Two-Factor Authentication card with its Disabled status and an Enable 2FA button.

The Security tab is titled Account Security. It manages two-factor authentication (2FA) for the account you are signed in with. It uses a time-based code from an authenticator app such as Google Authenticator or Authy. A badge on the card shows Enabled or Disabled.

Step by step: turn on two-factor authentication

Section titled “Step by step: turn on two-factor authentication”
  1. Open Settings > General Settings and click the Security tab.
  2. Type your current password in the field Enter your password to continue.
  3. Click Enable 2FA.
  4. Step 1: scan the QR code with your authenticator app. If you cannot scan, type the secret key shown under Manual Entry.
  5. Step 2: type the 6-digit code from the app and click Confirm & Enable. The button stays disabled until you type six digits.
  6. Recovery codes are shown. Click Copy All Codes, store them somewhere safe, then click I’ve Saved My Codes.
  1. With 2FA on, find the Recovery Codes block and click Regenerate Codes.
  2. Type your password in the box that opens.
  3. Copy the new codes and store them safely.

Step by step: turn two-factor authentication off

Section titled “Step by step: turn two-factor authentication off”
  1. Click Disable Two-Factor Auth.
  2. In Confirm Disabling 2FA, type your Password and the 6-digit Authenticator Code.
  3. Click Confirm Disable. The message 2FA Disabled confirms it.
Setting What it does
Status badge Enabled or Disabled for your account.
Enter your password to continue Your current password. Needed to start enabling 2FA.
Enable 2FA Starts the setup and shows the QR code. Disabled until you type a password.
QR code and Manual Entry The QR code and the secret key to register the account in your authenticator app.
6-digit code The code from the app. Only digits are accepted and the field stops at six.
Cancel Leaves the setup without turning 2FA on.
Confirm & Enable Checks the code and turns 2FA on.
Recovery codes list One-time codes you can use if you lose the authenticator app. Each code works once.
Copy All Codes Copies the codes to the clipboard.
Regenerate Codes Creates a new set after you type your password.
Disable Two-Factor Auth Opens the disable form. It needs your password and a current code.