# Set up and manage two-factor authentication

Source: https://support.exposure.co/en/articles/set-up-and-manage-two-factor-authentication/

Two-factor authentication is optional for member accounts. Enable it in **Settings → Security & Signin**.

Two-factor authentication adds a code check after your password. You get the code from an authenticator app. You can also use one unused recovery code.

## Set up your authenticator

1.  Sign in to the Exposure account you want to protect.
    
2.  Open **Settings → Security & Signin**.
    
3.  Select **Set up two-factor authentication**.
    
    ![Two-factor authentication card with the Set up two-factor authentication button.](<https://support.exposure.co/media/account-security/set-up-two-factor.jpg>)
    
4.  Enter your current account password, then select **Continue setup**.
    
    ![Setup confirmation form with Current password and Continue setup.](<https://support.exposure.co/media/account-security/confirm-setup.jpg>)
    
5.  Scan the QR code with your authenticator app. If you cannot scan it, enter the setup key in the app.
    
6.  Enter the six-digit code from the app and select **Confirm authenticator**.
    
7.  Use **Copy codes** or **Download codes** to save your recovery codes in a safe place.
    
8.  Select **I saved my codes**.
    

Setup expires after ten minutes. If it expires, start again. Your authenticator is not active until you confirm its code. Other sessions for this account end when setup completes.

Keep the QR code, setup key, and recovery codes private. Do not send them to support. See [Use and replace recovery codes](<https://support.exposure.co/en/articles/use-and-replace-recovery-codes/>).

## Sign in with two-factor authentication

Enter your username or email and password. On the next screen, enter the code from your app or one unused recovery code.

A code that you just used cannot be used again. Wait for a new code in your app before you use it for another security check.

## Change your authenticator

1.  Open **Settings → Security & Signin** in the correct account.
    
2.  Select **Update** next to **Two-factor authentication**.
    
    ![Enabled two-factor settings with Update and Create new codes buttons.](<https://support.exposure.co/media/account-security/manage-two-factor.jpg>)
    
3.  Enter your current password and a code from your current authenticator, or an unused recovery code.
    
4.  Scan the new QR code with the authenticator you want to use.
    
5.  Enter its code to confirm the change, then save the new recovery codes.
    

The change expires after five minutes. Your current authenticator stays active until you confirm the new one. After confirmation, the old authenticator and old recovery codes stop working. Other sessions for this account end.

## Turn off two-factor authentication

1.  Open **Settings → Security & Signin**.
2.  Select **Turn off two-factor authentication**.
3.  Enter your current password and an authenticator or unused recovery code.
4.  Confirm that you want to turn it off.

Your password alone will allow sign-in. The authenticator and recovery codes stop working, and other sessions for this account end.

If you cannot provide a code, see [Fix two-factor sign-in problems](<https://support.exposure.co/en/articles/fix-two-factor-sign-in-problems/>). Resetting your password does not remove two-factor authentication.

* * *

## Need help?

Use the [Exposure contact form](<https://exposure.co/contact>).