Setting up two-factor authentication
Two-factor authentication (2FA) adds a second step to signing in. After entering your password, you'll also need to enter a one-time code from an authenticator app. This means your account stays secure even if your password is compromised.
What you'll need
An authenticator app installed on your phone. Popular options:
- Google Authenticator (iOS / Android)
- Authy (iOS / Android)
- 1Password (if you use a password manager with TOTP support)
- Microsoft Authenticator (iOS / Android)
Enabling 2FA
Open User Settings
Click your profile avatar or name in the top navigation and select User Settings, or go directly to the Security tab.
Go to the Security tab
Select the Security tab in User Settings.
Click Enable 2FA
Click Enable Two-Factor Authentication. A QR code will appear.
Scan the QR code with your authenticator app
Open your authenticator app and scan the QR code. The app will add a new entry for Greylytics and start generating 6-digit codes.
Enter the verification code
Type the current 6-digit code from your authenticator app into the verification field in Greylytics and click Verify.
Save your recovery codes
Greylytics will display a set of one-time recovery codes. Download or print these and store them somewhere safe — they can be used to access your account if you lose your authenticator device.
Danger
Save your recovery codes before closing the setup screen. If you lose access to your authenticator app and have no recovery codes, you will be locked out of your account.
Signing in with 2FA
After 2FA is enabled, the sign-in flow changes:
- Enter your email and password as normal.
- You'll be prompted to enter the 6-digit code from your authenticator app.
- Enter the current code and click Verify.
Codes rotate every 30 seconds, so enter the code quickly. If it expires while you're typing, just wait for the next one.
Disabling 2FA
To remove 2FA from your account:
- Go to User Settings → Security.
- Click Disable Two-Factor Authentication.
- Enter your current 6-digit authenticator code to confirm.
Warning
Disabling 2FA makes your account less secure. Only disable it if you're replacing your authenticator app or changing devices, then re-enable it immediately.
Lost your authenticator device?
Use one of your saved recovery codes to sign in:
- On the 2FA prompt screen, click Use a recovery code.
- Enter one of your unused recovery codes.
- Once signed in, go to User Settings → Security to disable 2FA and re-enable it with your new device.
Each recovery code can only be used once.