---
title: "Turn on two-factor authentication"
url: "https://enfonica.com/help/security/two-factor-authentication"
summary: "In the Console, select your name in the bottom-left corner, and then select Account. Check that your email address is verified. Under Two-Factor Authentication, select Enable, scan the QR code with an authenticator app, and enter the 6-digit code it shows. From then on, signing in asks for a code from the app."
type: how-to
audience: customers
products: ["Enfonica Console"]
works_with: ["Any authenticator app that supports TOTP codes"]
who_can_do_this: "Anyone with a Console login, for their own login"
---

# Turn on two-factor authentication

**Short answer:** In the Console, select your name in the bottom-left corner, and then select Account. Check that your email address is verified. Under Two-Factor Authentication, select Enable, scan the QR code with an authenticator app, and enter the 6-digit code it shows. From then on, signing in asks for a code from the app.

**Applies to:** Enfonica Console  
**Works with:** Any authenticator app that supports TOTP codes  
**Who can do this:** Anyone with a Console login, for their own login

## Before you start

- Your Console email address and password, and access to that email inbox.
- An authenticator app on your phone, such as Google Authenticator or Authy.

## Verify your email address first

You can turn on two-factor authentication only for a login with a verified email address, so check this first. A verified address also makes sure that you receive notices about your account.

1. Sign in to the [Enfonica Console](https://console.enfonica.com/).
2. In the bottom-left corner, select your name, and then select **Account**. The **My account** page opens.
3. Under **Account information**, look at **Email verified**. If it says **Verified**, go to [Turn on two-factor authentication](https://enfonica.com/help/security/two-factor-authentication#turn-on-two-factor-authentication).
4. If it shows a **Verify** link instead, select it, and then select **Send email**.
5. Open the email, and follow its link.
6. Refresh the **My account** page. **Email verified** now says **Verified**.

## Turn on two-factor authentication

With two-factor authentication, signing in to the Console needs your password and a code from your phone. A stolen or guessed password isn't enough on its own. A project Owner also needs it to change toll fraud prevention settings, so turn it on before you ever need to change them.

1. On the **My account** page, under **Two-Factor Authentication**, select **Enable**.
2. Enter your current password, and then select **Continue**. A QR code appears.
3. In your authenticator app, add a new account, and scan the QR code. If your phone can't scan it, enter the key shown below the QR code into the app instead.
4. Under **Verification code**, enter the 6-digit code from the app, and then select **Verify and enable**. The Console confirms that two-factor authentication is enabled.
5. Select **Close**.

## Check that it worked

1. On the **My account** page, make sure that **Two-Factor Authentication** shows **Enabled (TOTP)**.
2. In the bottom-left corner, select your name, and then select **Logout**.
3. Sign in again. After you enter your password, the Console asks for an **Authentication code**.
4. Enter the current code from your app, and then select **Confirm**. The Console opens as usual.

## What if the QR code won't scan?

The QR code uses TOTP, the open standard behind most authenticator apps, so any of them can read it. If yours can't, try these fixes in order:

1. Update the authenticator app to its latest version.
2. Instead of scanning, enter the key shown below the QR code into the app.
3. Try a different app, such as Google Authenticator.

## What if the code isn't accepted?

Enter the code that the app shows at that moment. Each code is valid only briefly.

If codes keep failing, check that your phone sets its date and time automatically. The codes are calculated from the time. If a phone's clock has drifted, it produces codes that the Console won't accept.

## What should I do before changing phones?

Move your codes to the new phone while you still have the old one. Most authenticator apps have a transfer or backup feature for this. If yours doesn't, use a code from the old phone to turn off two-factor authentication on the **My account** page. Then turn it on again with the new phone.

## What if I lose my phone?

Contact us from the email address you sign in with. We'll confirm that it's you before we turn off two-factor authentication on your login. Without your authenticator app, you can't sign in, and turning off two-factor authentication needs a current code.

## Turn two-factor authentication off

1. On the **My account** page, under **Two-Factor Authentication**, select **Disable**.
2. Enter your **Password** and the current **Authenticator code** from your app.
3. Select **Disable MFA**. The card shows **Enable** again.

If your organization requires two-factor authentication, **Disable** is grayed out, and you can't select it.

## Questions

### Does everyone in my business need to turn it on?

Each person turns it on for their own login. We recommend it for everyone, and project Owners who manage toll fraud prevention must have it. If your organization requires it, the Console asks you to set it up the next time you sign in, starting with verifying your email address.

### Do I need a code to change my password?

Yes. After you turn on two-factor authentication, **Change password** on the **My account** page asks for your current password, your new password, and an **Authenticator code**.

### Can I use one authenticator app for several Console logins?

Yes. Each login gets its own QR code and its own entry in the app, so scan the code for each login separately.

## Related

- [Can't sign in to the Enfonica Console](https://enfonica.com/help/console/cant-sign-in.md)
- [Toll fraud alert: what to do if your phone system is compromised](https://enfonica.com/help/security/toll-fraud.md)
- [Add users to the Console and choose their access](https://enfonica.com/help/console/users-and-access.md)
- [Securing your Enfonica account](https://enfonica.com/blog/securing-your-enfonica-account/)

---

Web version: https://enfonica.com/help/security/two-factor-authentication