> ## Documentation Index
> Fetch the complete documentation index at: https://docs.valendata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Enable Two-Factor Authentication on Your Valendata Account

> Two-factor authentication (2FA) adds a second verification step when you log in. Valendata uses TOTP — time-based one-time codes generated by an authenticator app on your phone. No SMS codes, no email links.

## Supported authenticator apps

You can use any TOTP-compatible authenticator app to secure your account. Popular choices include:

<CardGroup cols={2}>
  <Card title="Google Authenticator" icon="google">
    Free, simple app available on iOS and Android.
  </Card>

  <Card title="Authy" icon="shield">
    Supports multi-device sync and encrypted backups.
  </Card>

  <Card title="1Password" icon="lock">
    Combines password management with built-in TOTP.
  </Card>

  <Card title="Any TOTP app" icon="key">
    Any app that supports the standard TOTP/RFC 6238 protocol works.
  </Card>
</CardGroup>

## Enable two-factor authentication

<Steps>
  <Step title="Open your Profile settings">
    Go to [app.valendata.com](https://app.valendata.com) and navigate to **Settings → Account**.
  </Step>

  <Step title="Start the 2FA setup">
    Click **Enable Two-Factor Authentication**. Valendata displays a QR code tied to your account.
  </Step>

  <Step title="Scan the QR code">
    Open your authenticator app, add a new account, and scan the QR code. Your app will immediately begin generating 6-digit codes that rotate every 30 seconds.
  </Step>

  <Step title="Confirm with a verification code">
    Enter the current 6-digit code from your authenticator app into the confirmation field and click **Verify**. This confirms that your app is correctly paired.
  </Step>
</Steps>

## Sign in with 2FA enabled

After entering your email and password on the login page, Valendata prompts you for your 6-digit TOTP code. Open your authenticator app, copy the current code, and enter it to complete sign-in. Codes are valid for 30 seconds — if one expires before you submit it, simply use the next code that appears.

## Disable two-factor authentication

You can turn off 2FA at any time from the same settings panel.

1. Go to **Settings → Account**.
2. Under the **Two-Factor Authentication** section, click **Disable**.
3. Enter a current 6-digit code from your authenticator app to confirm your identity.
4. 2FA is immediately removed from your account.

<Note>
  Disabling 2FA means your account is protected by your password alone. Re-enable it as soon as possible if you disable it temporarily, for example when switching authenticator apps.
</Note>

## Switching authenticator apps

If you move to a new authenticator app or a new device, disable 2FA first using your current app, then re-enable it and scan the fresh QR code with your new app.

## Frequently asked questions

<Accordion title="Does 2FA apply to API key usage?">
  No. API keys authenticate machine-to-machine requests directly and are not subject to 2FA. 2FA only applies to interactive sign-in through the web app. Keep your API keys secure and rotate them regularly — see the [API Keys guide](/account/api-keys) for best practices.
</Accordion>

<Accordion title="Can I see which authenticator app is linked to my account?">
  Valendata does not store information about which app you use — only the TOTP secret is stored. You can disable and re-enable 2FA at any time to rotate the secret and re-pair a new app.
</Accordion>

<Info>
  Two-factor authentication was introduced in Valendata **v1.0.1** (released 2026-06-25).
</Info>