MFA-Authenticator apps (TOTP)
Last updated
Last updated
This section explains how to use Authenticator Apps (TOTP) as a Multi-Factor Authentication (MFA) method, including:
How to set up an authenticator app
How TOTP verification works during sign-in
What happens after successful setup
📌 This guide covers Time-based One-Time Password (TOTP) authentication only. Email-based MFA and o=passkeys are documented separately.
If you want stronger security than email codes, authenticator apps are recommended.
An authenticator app:
Generates a time-based one-time code on your device
Works even without internet access
Is harder to compromise than email
Common authenticator apps:
Authenticator-based MFA adds a second security factor by requiring a temporary code generated on your personal device, ensuring:
Before setting up an authenticator app, make sure that:
⚠️ Email verification is enabled by default when MFA is turned on. Authenticator App is an additional method you can add.
If you cannot scan the QR code, you can manually enter the setup key.
✅ Authenticator App MFA is now successfully enabled.
Once Authenticator MFA is enabled:
If you have not installed an authenticator app, install one before continuing.
Lost your device?
Code not working?
Only users with physical access to the device can sign in
Protection against phishing and email compromise
Compliance with higher security requirements
Your account is created and signed in
Multi-Factor Authentication (MFA) is enabled
You have installed an authenticator app on your mobile phone or tablet
Go to Account → Security
Turn on Multi-Factor Authentication
In Security → Multi-Factor Authentication
Select Authenticator App
Click Set up authenticator app
Turn on Authenticator app
Open your authenticator app on your device
Choose Add account
Scan the QR code shown on the screen
Enter the 6-digit verification code generated by the authenticator app
Click Confirm
Enter your email and password
Select Authenticator App as the verification method
Select Authenticator as the verification method.
Open your authenticator app on your mobile phone or iPad.
Enter the verification code displayed in the app.
Sign-in completes automatically after successful verification.
TOTP codes refresh every 30 seconds
Codes are single-use and time-limited
Authenticator apps work offline
You can keep Email MFA enabled as a backup method
You can remove or reset the authenticator app from Security settings
Use Email verification (if enabled) to sign in
Reset MFA from account security settings
Ensure your device time is set automatically
Wait for the next code refresh and try again
Item
Description
MFA Method
Authenticator App (TOTP)
Setup Required
QR code or manual key
Used During
Sign-in after password
Internet Required
No
Security Level
High
Best For
Users needing stronger account protection