# Two-step authentication (2FA)

Two-factor authentication (2FA) significantly increases your account's security. It works by requiring an additional, one-time code during login, on top of your standard password.

{% hint style="success" %}
**Good to know**: On every new MessageFlow account, the 2FA feature is active by default with SMS verification. This guide shows you how to manage its settings.
{% endhint %}

## **How to Configure 2FA?**

{% stepper %}
{% step %}

### Locate the Feature 

You can find the two-factor authentication settings in your panel by navigating to **Account** > **Settings** > **Security**. Look for the **Two-factor Authentication (2FA)** option and make sure it is enabled.

<figure><img src="/files/eztDJeoLh2StcgtHAVwy" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

### Choose Your Verification Channel&#x20;

The system allows for a flexible choice of channels for receiving your codes. The available channels are:

* **SMS**&#x20;
* **App** (e.g., Google Authenticator)
* **Hardware security** **key** (U2F standard)

You can select a single, primary verification channel or combine the App/Hardware key with SMS, which can then serve as an alternative method.

{% hint style="warning" %}
**Important**: The 2FA configuration you set here is shared across the entire account. This means that the chosen authentication methods will be mandatory for all of its users.
{% endhint %}
{% endstep %}

{% step %}

### Set Up Trusted Devices&#x20;

You can specify how long your device should be treated as "trusted," which eliminates the need to enter a code at every login.

* Single sign-on
* 1 Day
* 1 Week
* 30 Days
  {% endstep %}
  {% endstepper %}

Finally, save the configuration using the **Save** button. From that point on, during subsequent logins, the system will ask for the additional verification.

{% hint style="info" %}

### **Information for Account Administrators**

* Enabling verification via SMS will trigger a system check to see if all users have phone numbers assigned. You will be notified of any missing information with an additional message.
* With the SMS method active, providing a phone number is mandatory when adding new users to the account.
  {% endhint %}

<figure><img src="/files/4V3udJPQ1vbZGafiLDtz" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/kIkbMyk5ghtvDJ9VkERn" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/0t8bAucWdnakLbAoUP1b" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.messageflow.com/account/login-and-account-management/two-step-authentication-2fa.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.