# Two Factor Authentication

Source: https://docs.astalty.com.au/guide/users/two-factor-authentication

> Turn on two-factor authentication for your own account.

You can enable 2FA for your own Astalty account to add a second step when you sign in.

## Navigate to "My Profile"

To activate Two-Factor Authentication (2FA), click your initials and then click **My Profile**.

![The Dashboard with the profile menu open from the user's name at the bottom of the main menu. Marker 1 is on the name and marker 2 is on My Profile, above Training and Log out.](https://docs.astalty.com.au/assets/my-profile-1760480668.png)

## Enable 2FA

On your profile, click on "Security" and then "Enable Two-Factor Authentication". You will then be asked to enter your password and scan a QR code with your authenticator app.

> **IMPORTANT - Recovery Codes**
>
> When you enable 2FA, Astalty shows recovery codes. Save them in a secure location. A recovery code lets you sign in if you lose access to your authenticator. If both the device and recovery codes are gone, ask the Account Owner to reset your 2FA. See [Troubleshooting 2FA](https://docs.astalty.com.au/guide/troubleshooting-2fa).

![The Security tab of a user's profile, saying You have not enabled Two-Factor Authentication yet, with an arrow pointing to the Enable Two-Factor Authentication button.](https://docs.astalty.com.au/assets/enabled-2fa.png)

You will be prompted to enter your Astalty Password.

![The Confirm Password dialog with an empty Password field, and marker 1 on an arrow pointing to the Confirm button.](https://docs.astalty.com.au/assets/2fa-enable-4.png)

Then you will need to follow the steps provided (Use an Authenticator to scan the QR code, and enter the token generated).

![The Confirm 2FA dialog, with marker 2 on the highlighted steps to download an authenticator app, scan the QR code shown blurred, and enter the 6-digit token in the Code field, above the Confirm button.](https://docs.astalty.com.au/assets/2fa-enable-5.png)

Once successfully enabled, the 2FA status shows that it is active and you can view the recovery codes.

![The Security tab with the Two-Factor Authentication card highlighted, saying Two-Factor Authentication is enabled, with Show Recovery Codes and Disable Two-Factor Authentication below.](https://docs.astalty.com.au/assets/2fa-enable-6.png)

Turning on 2FA signs you out of the Astalty app on every phone, and out of the Outlook add-in. See [What Setting Up 2FA Signs Out](https://docs.astalty.com.au/guide/users/passwords-and-sessions#what-setting-up-2fa-signs-out).

## Disable 2FA

After enabling 2FA you may be able to disable it from the same menu. The Account Owner can turn off 2FA self-management for the organisation. If that setting blocks you, contact the Account Owner. The Account Owner can always disable their own 2FA.

![The Security tab showing Two-Factor Authentication is enabled, with Show Recovery Codes on the left and the Disable Two-Factor Authentication button highlighted on the right.](https://docs.astalty.com.au/assets/d2fa.png)

> **Codes not being accepted?**
>
> If your authenticator codes are being rejected, the most common cause is the date and time on your
> phone. See [Troubleshooting 2FA](https://docs.astalty.com.au/guide/troubleshooting-2fa).

## Video Guide

You can watch the video below which will take you through the entire process.

Video walkthrough: how to enable two factor authentication.
