> For the complete documentation index, see [llms.txt](https://docs.messageflow.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.messageflow.com/account/login-and-account-management/two-step-authentication-2fa.md).
# Two-step authentication (2FA)
Two-factor authentication (2FA) significantly increases your account's security. It works by requiring an additional, one-time code during login, on top of your standard password.
{% hint style="success" %}
**Good to know**: On every new MessageFlow account, the 2FA feature is active by default with SMS verification. This guide shows you how to manage its settings.
{% endhint %}
## **How to Configure 2FA?**
{% stepper %}
{% step %}
### Locate the Feature
You can find the two-factor authentication settings in your panel by navigating to **Account** > **Settings** > **Security**. Look for the **Two-factor Authentication (2FA)** option and make sure it is enabled.
{% endstep %}
{% step %}
### Choose Your Verification Channel
The system allows for a flexible choice of channels for receiving your codes. The available channels are:
* **SMS**
* **App** (e.g., Google Authenticator)
* **Hardware security** **key** (U2F standard)
You can select a single, primary verification channel or combine the App/Hardware key with SMS, which can then serve as an alternative method.
{% hint style="warning" %}
**Important**: The 2FA configuration you set here is shared across the entire account. This means that the chosen authentication methods will be mandatory for all of its users.
{% endhint %}
{% endstep %}
{% step %}
### Set Up Trusted Devices
You can specify how long your device should be treated as "trusted," which eliminates the need to enter a code at every login.
* Single sign-on
* 1 Day
* 1 Week
* 30 Days
{% endstep %}
{% endstepper %}
Finally, save the configuration using the **Save** button. From that point on, during subsequent logins, the system will ask for the additional verification.
{% hint style="info" %}
### **Information for Account Administrators**
* Enabling verification via SMS will trigger a system check to see if all users have phone numbers assigned. You will be notified of any missing information with an additional message.
* With the SMS method active, providing a phone number is mandatory when adding new users to the account.
{% endhint %}
