Open your profile
Click your avatar in the dashboard → Profile.
Developer documentation
Two-Factor Authentication
Protect agent accounts with TOTP-based 2FA.
Dashboard: Dashboard → Profile → Two-factor authentication
Add an extra layer of security to agent accounts with time-based one-time passwords (TOTP) compatible with Google Authenticator, Authy, and similar apps.
Enable 2FA
Start 2FA setup
Click Enable two-factor authentication. Scan the QR code with your authenticator app.
Confirm with a code
Enter the 6-digit code from your app to confirm. Save your recovery codes in a secure place.
Login with 2FA
After entering email and password, agents with 2FA enabled are prompted for a TOTP code or a recovery code.
Lost your device? Use a recovery code to sign in, then disable and re-enable 2FA with a new authenticator.
Disable 2FA
From Profile → Two-factor authentication, enter your current TOTP code to disable. Admins should require 2FA for all team members in security-sensitive deployments.
API
| Endpoint | Purpose |
|---|---|
GET /api/two-factor/status | Check if 2FA is enabled |
POST /api/two-factor/enable | Start setup (returns QR) |
POST /api/two-factor/confirm | Confirm with TOTP code |
POST /api/two-factor/disable | Disable 2FA |
POST /api/two-factor/challenge | Complete login challenge |