# Set up two-factor authentication

Protect your RightMessage login with a code from your authenticator app, save recovery codes, and sign in with either one.

Two-factor authentication keeps your account safe even if someone learns your password. Once it's on, signing in also asks for a 6-digit code from an authenticator app on your phone, such as 1Password, Google Authenticator, or Authy.

Two-factor protects your login across every project you can open, so you only set it up once.

## Turn on two-factor

1. Open **Your account** (the avatar at the bottom of the sidebar), then **Sign-in & security**.
2. Under **Two-factor authentication**, choose **Set up**.

![Two-factor authentication section of Sign-in & security, turned off, with the Set up button](https://rightmessage.com/help/screens/account-two-factor.light.webp)

3. If RightMessage asks you to **Confirm your password**, enter it and choose **Confirm**.
4. Scan the QR code with your authenticator app. If you can't scan it, copy the setup key under **Can't scan it? Enter this setup key** into the app instead.
5. Enter the **6-digit code from the app** and choose **Turn on**.

RightMessage then shows your recovery codes. Each one signs you in once if you lose your authenticator app. Choose **Copy** or **Download** and keep them somewhere safe, like your password manager, then choose **Done**.

If you close the dialog before entering a code, **Status** says **Setup not finished**. Choose **Finish setup** to pick up with the same QR code, or **Cancel setup** to start over later.

## Sign in with two-factor

1. Enter your email and password on [the sign-in page](https://app.rightmessage.com/login) as usual.
2. On **Two-factor authentication**, enter the **Authentication code** from your app.
3. Choose **Verify and sign in**.

Don't have your phone? Choose **Use a recovery code instead** and enter one of your saved codes. Each recovery code works only once.

## Manage your recovery codes

Under **Two-factor authentication**, choose **Show recovery codes** to see the codes you have left. Confirm your password if asked. **Regenerate** makes a fresh set, and the old codes stop working right away, so save the new ones before you choose **Done**.

## Turn off two-factor

1. Under **Two-factor authentication**, choose **Turn off**.
2. In **Turn off two-factor?**, choose **Turn off**.
3. If RightMessage asks you to **Confirm your password**, enter it and choose **Confirm**. Two-factor turns off right away.

You'll sign in with only your password. Your authenticator app entry and recovery codes stop working, and you can set two-factor up again any time.

If you've lost both your authenticator app and your recovery codes, contact [support](mailto:support@rightmessage.com). For other sign-in problems, see [sign in or reset your password](https://rightmessage.com/help/reset-your-password).