Enable TOTP and store recovery codes
Where: Settings → Two-factor authentication
Before you start
A code is requested on password sign-in after enrolment. Recovery codes are one-time credentials. Reissuing codes invalidates the old set. The staff reminder is not enforced enrolment in this release.
Step by step
- Choose Set up two-factor authentication and confirm your password.
- Scan the QR code or enter the key into your authenticator app.
- Enter its six-digit code and Turn two-factor on.
- Store recovery codes privately away from the device; use one if the authenticator is unavailable.
- Issue new recovery codes or turn two-factor off only with the required password verification.
Settings and behaviour
A code is requested on password sign-in after enrolment. Recovery codes are one-time credentials. Reissuing codes invalidates the old set. The staff reminder is not enforced enrolment in this release.
Check the result
Reload and confirm the saved result using the same account. For private or paid content, also check the intended audience without sharing your session.
Common questions and troubleshooting
Code invalid: check the phone clock and current six digits. Device and recovery codes lost: contact staff for verified recovery; do not send a secret key/password in a public request.