> ## Documentation Index
> Fetch the complete documentation index at: https://docs.gcore.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Set up two-factor authentication

> Set up two-factor authentication (2FA) with an authenticator app, generate backup codes, and sign in securely.

Two-factor authentication (2FA) asks for a one-time code at login in addition to the password. Turn it on from **My profile** with an authenticator app, and store backup codes for when that app is unavailable.

## Enable two-factor authentication

The setup dialog accepts Google Authenticator or Microsoft Authenticator.

**1. Open My profile**

In the [Gcore Customer Portal](https://portal.gcore.com), click the avatar in the top-right corner and select **Profile**.

**2. Click Enable 2FA**

![Two-Factor authentication section with the Enable 2FA button](https://mintcdn.com/gcore/EKCXsKO2SAmIaNmP/images/docs/account-settings/my-profile/two-factor-authentication/enable-2fa-button.png?fit=max\&auto=format\&n=EKCXsKO2SAmIaNmP\&q=85\&s=18962a0f5ced796669a3332c682ed34f)

**3. Install an authenticator app**

In the **Enable Two-Factor authentication** dialog, download and install one of the listed apps:

* Google Authenticator ([iOS](https://itunes.apple.com/app/google-authenticator/id388497605?mt=8), [Android](https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2\&hl=en))
* Microsoft Authenticator ([iOS](https://apps.apple.com/app/microsoft-authenticator/id983156458?mt=8), [Android](https://play.google.com/store/apps/details?id=com.azure.authenticator\&hl=en))

**4. Scan the QR-code**

In the authenticator app, scan the code shown under **Scan the QR-code**.

**5. Enter the code and click Check**

Enter the six-digit code from the app and click **Check**.

![Enable Two-Factor authentication dialog with a QR code](https://mintcdn.com/gcore/EKCXsKO2SAmIaNmP/images/docs/account-settings/my-profile/two-factor-authentication/2fa-qr-dialog.png?fit=max\&auto=format\&n=EKCXsKO2SAmIaNmP\&q=85\&s=599da5b03606b5ee2d3895124b7babbf)

> **Troubleshooting authenticator apps**
>
> If **Check** rejects a code, check the following.
>
> ### Check time synchronization
>
> 2FA needs the authenticator app and the login device to share the same time. If a correct code is rejected, confirm the date and time and turn on network time synchronization on the login device.
>
> ### Check device configuration
>
> If the authenticator app was moved to a new device, confirm that it is set up on that device.

After **Check** succeeds, 2FA is active for that user.

### Generate backup verification codes

After 2FA is active, the **Two-Factor authentication** section shows an **Enabled** badge, **Disable 2FA**, and **Generate backup code**. Backup codes sign the user in when the authenticator app is unavailable.

To generate codes, click the avatar in the top-right corner, select **Profile**, and on **My profile** click **Generate backup code**.

![Two-Factor authentication section with Disable 2FA and Generate backup code](https://mintcdn.com/gcore/EKCXsKO2SAmIaNmP/images/docs/account-settings/my-profile/two-factor-authentication/2fa-security-section.png?fit=max\&auto=format\&n=EKCXsKO2SAmIaNmP\&q=85\&s=b545b7f038128a08a172649f67660c0f)

> [!WARNING]
>
> Each backup code can be used only once. **Generate backup code** replaces the previous set.

The dialog is titled **Copy backup verification codes**. It shows five codes, with **Print**, **Copy**, **Download**, and **Regenerate**. Store the codes before closing the dialog. **Regenerate** replaces the current set.

![Copy backup verification codes dialog](https://mintcdn.com/gcore/EKCXsKO2SAmIaNmP/images/docs/account-settings/my-profile/two-factor-authentication/backup-codes-dialog.png?fit=max\&auto=format\&n=EKCXsKO2SAmIaNmP\&q=85\&s=d87d31f4f15784f2206dadd87724e07a)

## Log in with two-factor authentication

With 2FA active, the [login page](https://auth.gcore.com/login/signin) asks for an authenticator code after the password.

**1. Enter the email and password**

On the login page, enter the email address and password, then click **Log in**.

![Login page with email, password, and Log in](https://mintcdn.com/gcore/EKCXsKO2SAmIaNmP/images/docs/account-settings/my-profile/two-factor-authentication/login-page.png?fit=max\&auto=format\&n=EKCXsKO2SAmIaNmP\&q=85\&s=d1a75aa81ef28ce0e47c77882cb3b35a)

**2. Enter the verification code**

On **Enter authenticator passcode**, enter the code from the authenticator app in **Verification code**, or a [backup code](#generate-backup-verification-codes), then click **Log in**.

![Enter authenticator passcode screen](https://mintcdn.com/gcore/EKCXsKO2SAmIaNmP/images/docs/account-settings/my-profile/two-factor-authentication/enter-code-auth.png?fit=max\&auto=format\&n=EKCXsKO2SAmIaNmP\&q=85\&s=e9f1c4a31dfd21136ebd5214bca2c484)

## Disable two-factor authentication

Disabling 2FA sends a confirmation link to the email address on the account.

**1. Open My profile**

In the Customer Portal, click the avatar in the top-right corner and select **Profile**.

**2. Click Disable 2FA**

In the **Two-Factor authentication** section, click **Disable 2FA**.

![My profile page with the Disable 2FA button](https://mintcdn.com/gcore/EKCXsKO2SAmIaNmP/images/docs/account-settings/my-profile/two-factor-authentication/disable-2fa-section.png?fit=max\&auto=format\&n=EKCXsKO2SAmIaNmP\&q=85\&s=d3aa5eace4b00abb212281f9c7a864d8)

**3. Confirm the dialog**

In the confirmation dialog, click **Confirm**. A confirmation link is sent to the email address on the account. The address is masked in the dialog.

**4. Open the confirmation link**

Open the email and click the confirmation link.

2FA is inactive, and the Customer Portal returns to **My profile**.

> [!WARNING]
>
> The confirmation link is single-use and expires after a short period. If the link has expired or was already used, an error page appears. Return to **My profile** and click **Disable 2FA** to request a new link.

## User 2FA status

To view 2FA status, click the avatar in the top-right corner, select **Profile**, then in the sidebar select **All users**. The table has a **Two-Factor authentication** column for each user. Filter that column with **Activated** or **Not activated**.

**Require 2FA for all users in the account** is on the same page. The control states that users without 2FA are asked to set it up the next time they sign in, including users invited later. The switch stays unavailable until 2FA is enabled on the signed-in user's profile, and the tooltip says to enable 2FA in the profile first.