# Two-factor authentication Two-factor authentication (2FA) adds an extra layer of security to your account. After you turn on 2FA, signing in requires both your password and a time-based one-time code (TOTP) from an authenticator app. 2FA is set per account, not per workspace — enabling it protects your sign-in everywhere. ## Setting up 2FA 1. Click your name at the bottom of the sidebar, open **Settings**, and go to the **Security** tab 2. Click **Enable 2FA** 3. Scan the QR code with your authenticator app (Google Authenticator, Authy, 1Password, or similar) — or enter the setup key manually if you can't scan 4. Enter the 6-digit code from your app to confirm 2FA isn't active until you confirm with a valid code, so you can't lock yourself out mid-setup. ## Signing in with 2FA Once 2FA is enabled, the sign-in flow adds one step: 1. Enter your email and password as usual 2. You're prompted for a verification code 3. Open your authenticator app and enter the current 6-digit code 4. You're signed in ## Disabling 2FA 1. Go to **Settings**, then the **Security** tab 2. Click **Disable 2FA** and confirm You can re-enable it at any time; you'll go through setup again with a fresh QR code. ## If you're locked out If you lose access to your authenticator app, contact support@connectorcentral.com from the email address on your account. We verify your identity before we restore access. Consider storing your authenticator's own backup (most apps support encrypted backups or multi-device sync) so this doesn't happen. ## Do I need 2FA? 2FA isn't required, but we strongly recommend it — especially for workspace **admins** and **owners**, whose accounts control team membership, connections, access, and workspace settings. It takes a few minutes to set up and significantly reduces the risk of unauthorized access. ## Next steps For help with account access, [email support](mailto:support@connectorcentral.com) from the address on your account.