Skip to main content

​
Two-Factor Authentication (2FA)

Two-factor authentication (2FA) provides an additional layer of security protection for your account. Once enabled, logging in requires not only your password but also a one-time verification code generated by an authenticator.

​
Supported Authentication Methods

​
TOTP (Time-based One-Time Password)

Uses an authenticator app to generate a 6-digit verification code. Supported Authenticator Apps:
  • Google Authenticator
  • Microsoft Authenticator
  • Authy
  • 1Password
  • Other TOTP-compatible applications

​
Enabling 2FA

​
Prerequisites

  • Logged in to Qaptly account
  • Authenticator app installed (such as Google Authenticator)

​
Setup Steps

  1. Navigate to Security Settings
    • Click the user menu in the top right corner
    • Select “Settings” or navigate to /settings
    • Select the “Security” tab
  2. Enable TOTP
    • Find the “Two-Factor Authentication” section
    • Click the “Enable TOTP” button
  3. Scan QR Code
    • The system will display a QR Code and secret key
    • Open your authenticator app
    • Select “Add Account” or “Scan QR Code”
    • Scan the QR Code on the screen
  4. Manual Entry (Alternative Method)
    • If unable to scan the QR Code
    • Click “Show Manual Entry”
    • Select “Manually Enter Key” in the authenticator
    • Enter the displayed secret key
  5. Verify Setup
    • View the 6-digit verification code generated in the authenticator
    • Enter that verification code in Qaptly’s verification field
    • Click “Verify” to confirm
  6. Save Recovery Codes
    • Recovery codes will be displayed after successful setup
    • Be sure to save recovery codes in a secure place
    • Click “Download” to download recovery codes
    • Each recovery code can only be used once

​
Logging In with 2FA

After enabling 2FA, the login process is as follows:
  1. Enter username and password
  2. Click “Sign In”
  3. The system displays the 2FA verification dialog
  4. Open your authenticator app
  5. Enter the displayed 6-digit verification code
  6. Click “Verify” to complete login
Quick Entry Tips:
  • The verification code field supports auto-tabbing
  • You can directly paste the complete 6-digit verification code
  • Automatically submits after entering the complete code

​
Using Recovery Codes

If you cannot access your authenticator (such as lost phone), you can log in using a recovery code:
  1. In the 2FA verification dialog
  2. Click “Use Recovery Code”
  3. Enter one recovery code
  4. Click “Verify”
Important: Each recovery code can only be used once. The code becomes invalid after use.

​
Regenerating Recovery Codes

If recovery codes are used up or lost:
  1. Log in to your account (requires authenticator or remaining recovery codes)
  2. Navigate to “Settings” > “Security”
  3. Click “Regenerate Recovery Codes” in the 2FA section
  4. Enter current verification code to confirm identity
  5. Download and save new recovery codes
  6. All old recovery codes will become invalid

​
Disabling 2FA

If you need to disable 2FA:
  1. Navigate to “Settings” > “Security”
  2. Click “Disable TOTP” in the 2FA section
  3. Enter verification code to confirm
  4. 2FA is disabled
Security Reminder: Disabling 2FA reduces account security. It’s recommended to keep it enabled.

​
Frequently Asked Questions

​
Q: Verification code always shows as incorrect?

A:
  • Ensure your phone time is synchronized with network time
  • TOTP relies on time to generate verification codes; time deviation will cause verification to fail
  • You can enable “Automatic Date & Time” in phone settings

​
Q: How to transfer 2FA after changing phones?

A:
  1. Export authenticator accounts on the old phone (some apps support this)
  2. Or: Disable 2FA first, then re-enable after changing phones
  3. Or: Log in with recovery code and reconfigure

​
Q: What if all recovery codes are used up?

A:
  • If you can still log in with the authenticator, you can regenerate recovery codes
  • If you cannot log in at all, please contact the system administrator for assistance

​
Q: Can I set up the same 2FA on multiple devices?

A:
  • Yes, scan the QR Code with multiple devices simultaneously during setup
  • Or manually add the secret key to authenticators on other devices

​
Security Recommendations

  1. Protect recovery codes - Store them in a secure place, such as a password manager
  2. Do not screenshot QR Codes - Avoid storing setup information in insecure places
  3. Regular backups - Ensure you have a way to log in if devices are lost
  4. Use trusted authenticators - Choose well-known and continuously maintained applications

​
Related Features