> ## Documentation Index
> Fetch the complete documentation index at: https://help.ples.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Two-factor authentication

> Turn on 2FA with an authenticator app (TOTP) or email OTP, save backup codes, and complete the challenge at sign-in.

Two-factor authentication adds a second step after your password. You can use an **authenticator app** (TOTP) or **email verification** (OTP).

<Frame>
  <img src="https://mintcdn.com/ples/fv9e3631thkaIOyB/images/2fa.png?fit=max&auto=format&n=fv9e3631thkaIOyB&q=85&s=916a8d1502864a1771d64cfa8995bb77" alt="Ples Two-Factor Authentication settings with Enable 2FA and authenticator status" width="3024" height="1756" data-path="images/2fa.png" />
</Frame>

## Turn 2FA on

<Steps>
  <Step title="Open 2FA settings">
    Go to [app.ples.com/settings/authentication/2fa](https://app.ples.com/settings/authentication/2fa).
  </Step>

  <Step title="Click Enable 2FA">
    Choose **Authenticator App** (Google Authenticator, Authy, or similar) or **Email Verification**.
  </Step>

  <Step title="Finish the wizard">
    For TOTP, scan the QR code and enter a 6-digit code. For email, enter the code Ples sends to your account email. Save your [backup codes](/article/2fa-backup-codes) if you chose an authenticator.
  </Step>
</Steps>

## At sign-in

After email and password, Ples sends you to `/2fa-challenge` (**Verify Your Login**). Enter the 6-digit code from the app or from email, complete Cloudflare Turnstile, and click **Verify**. Email OTP can be resent after a short cooldown.

<Tip>
  Use an authenticator app if you can. Email OTP depends on that message arriving — see [Email is not arriving](/article/email-not-arriving).
</Tip>

You can disable 2FA from the same settings page after you confirm it is you.

## What's next?

<CardGroup cols={2}>
  <Card title="2FA backup codes" icon="key-round" href="/article/2fa-backup-codes">
    Save the 10 authenticator backup codes and use them if you lose your device.
  </Card>

  <Card title="Sessions" icon="monitor" href="/article/sessions">
    See devices signed in to your account and terminate a session.
  </Card>

  <Card title="Login notifications" icon="bell" href="/article/login-notifications">
    Optionally email yourself when someone signs in, including IP and location.
  </Card>

  <Card title="How to sign in" icon="log-in" href="/article/sign-in">
    Sign in with your email and password. Complete 2FA if you turned it on.
  </Card>
</CardGroup>