> ## Documentation Index
> Fetch the complete documentation index at: https://docs.fintoc.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Set up two-factor authentication

> Set up two-factor authentication (2FA) for the Fintoc dashboard with an authenticator app such as Google Authenticator or Authy, and sign in with a 6-digit code.

The Fintoc dashboard requires two-factor authentication (2FA). After you enter your email and password, you also enter a 6-digit code from an authenticator app on your phone. This page explains how to set up 2FA the first time you sign in and how to sign in afterward.

## Choose an authenticator app

You can use any authenticator app that generates 6-digit time-based one-time passwords (TOTP). For example:

* Google Authenticator
* Authy

Install the app on your phone before you sign in to the dashboard for the first time.

## Set up 2FA the first time you sign in

The first time you sign in, the dashboard shows **Configure your authenticator app** with a QR code.

1. Open your authenticator app on your phone.
2. In the app, add a new account and scan the QR code shown in the dashboard.
3. Enter the 6-digit code that the app shows for Fintoc.
4. Click **Confirm**.

Fintoc activates 2FA on your account, and the dashboard opens. In the **Team** section, your 2FA status changes to **OTP active**.

## Sign in with 2FA

Each time you sign in after setup, the dashboard shows **Enter the code from your authenticator app**.

1. Open your authenticator app and find the Fintoc code.
2. Enter the 6-digit code in the dashboard.
3. Click **Confirm**.

Each code is valid until your app shows the next code. If the dashboard rejects a code, wait for the app to show the next code and enter it. After three wrong codes in a row, Fintoc blocks your 2FA for 10 minutes. See [Unblock a locked account](https://docs.fintoc.com/guides/home/dashboard/manage-team.md#failed-2fa-code-attempts).

### Remember this device

Before you click **Confirm**, you can select **Remember this device for 30 days**. Fintoc then doesn't ask for a 2FA code when you sign in from the same device for the next 30 days. The option is off by default.

To make Fintoc ask for a code again on every device, open the [Team section](https://docs.fintoc.com/guides/home/dashboard/manage-team.md#open-the-team-section), open the options menu (**...**) on your own row, and select **Forget trusted devices**.

## Change your 2FA device

If you move your authenticator app to a new phone and can still sign in, change your 2FA device from the **Team** section:

1. Open the options menu (**...**) on your own row and select **Change 2FA device**.
2. Click **Change**. Your old device stops generating valid codes for Fintoc.
3. Scan the new QR code with the authenticator app on your new phone.
4. Enter the 6-digit code that the app shows and click **Confirm**.

If you lost the phone with your authenticator app, you can't change the device yourself. Ask an Admin in your organization to reset your 2FA. Fintoc then emails you a link to set up 2FA again. See [Unlock a teammate's 2FA](https://docs.fintoc.com/guides/home/dashboard/unlock-teammate-mfa.md#reset-the-2fa-of-a-teammate-who-lost-their-device).