Reactive-Resume/docs/guides/setting-up-two-factor-authentication.mdx

---
title: "Setting up two-factor authentication"
description: "Turn on two-step verification in Reactive Resume with an authenticator app, save your backup codes, and turn it off again when you need to."
---

Two-step verification adds a second check when you sign in: after your password, you enter a 6-digit code from an authenticator app on your phone or computer. Someone who learns your password still can't get in without it.

## Before you start

- Install an authenticator app, such as Google Authenticator, Microsoft Authenticator, 1Password, Bitwarden or Authy.
- Your account needs a password. If you signed up with a social account, the **Two-step verification** row doesn't appear until you [set a password](/guides/updating-your-profile#change-your-password).

## Turn on two-step verification

<Steps>
  <Step title="Open Sign-in & security">
    Select your name at the bottom of the sidebar, then **Settings**. On the **Account** page, find **Two-step verification** under **Sign-in & security**.
  </Step>

  <Step title="Turn the switch on and enter your password">
    The **Enable Two-Factor Authentication** dialog asks for your **Password**. Enter it and select **Continue**.

    <Frame>
      <img src="/images/guides/setting-up-two-factor-authentication/enter-password.webp" alt="The Enable Two-Factor Authentication dialog asking for your password, with a Continue button" />
    </Frame>

  </Step>

  <Step title="Save your backup codes">
    **Copy Backup Codes** shows 10 one-time codes. Select **Download** to save them as a text file, or **Copy** to paste them somewhere safe, such as your password manager. Then select **Continue**.

    <Frame>
      <img src="/images/guides/setting-up-two-factor-authentication/backup-codes.webp" alt="The Copy Backup Codes dialog listing ten codes in two columns, with Download, Copy and Continue buttons" />
    </Frame>

  </Step>

  <Step title="Add Reactive Resume to your authenticator app">
    In **Setup Authenticator App**, scan the QR code with your app. If you can't scan it, select the copy button next to the secret key above the code and paste the key into your app.

    <Frame>
      <img src="/images/guides/setting-up-two-factor-authentication/scan-qr-code.webp" alt="The Setup Authenticator App dialog with a secret key and copy button, a QR code, six code boxes, and Cancel and Continue buttons" />
    </Frame>

  </Step>

  <Step title="Enter the 6-digit code">
    Type the code your app shows for Reactive Resume. The dialog verifies it as soon as the code is complete, or you can select **Continue**. An accepted code turns on two-step verification and closes the dialog.
  </Step>
</Steps>

The switch now shows two-step verification is on. From your next sign-in, Reactive Resume asks for a code after your password.

<Frame caption="Two-step verification turned on">
  <img
    src="/images/guides/setting-up-two-factor-authentication/two-step-verification-on.webp"
    alt="The Sign-in and security section with the Two-step verification switch turned on"
  />
</Frame>

<Warning>
  Save the backup codes before continuing to the authenticator step. They are shown only once. Two-step verification
  stays off until your authenticator code is accepted. If you later lose your authenticator app and have no backup
  codes, you can't sign in with your password.
</Warning>

## Sign in with a code

After your password, enter the code from your app on the **Two-Factor Authentication** page. If you don't have your app, select **Lost access to your authenticator?** and enter a backup code. Each backup code works once. See [Signing in](/guides/signing-in#enter-a-two-step-code) for details.

Signing in with a [passkey](/guides/setting-up-passkeys) or a linked social account doesn't ask for a code.

## Turn off two-step verification

<Steps>
  <Step title="Turn the switch off">
    In **Sign-in & security**, turn off **Two-step verification**.
  </Step>

  <Step title="Confirm with your password">
    In **Disable Two-Factor Authentication**, enter your **Password** and select **Disable 2FA**.
  </Step>
</Steps>

<Frame caption="Turning off two-step verification needs your password">
  <img
    src="/images/guides/setting-up-two-factor-authentication/disable-dialog.webp"
    alt="The Disable Two-Factor Authentication dialog with a Password field and a Disable 2FA button"
  />
</Frame>

To move to a new phone, turn two-step verification off and on again, then scan the new QR code on the new device. Your old codes and backup codes stop working.

## Related guides

- [Setting up passkeys](/guides/setting-up-passkeys): a faster sign-in that is also resistant to phishing.
- [Updating your profile](/guides/updating-your-profile#change-your-password): change or set your password.