# 2FA

Enable two-factor authentication (2FA) for added security on your Shortcut account using an authenticator app.

## Overview

For added security, we encourage you and everyone in your organization to use either Google OAuth to log in or to set up two-factor authentication (2FA) for your Shortcut account. If you're using Google to sign in, you won't be prompted for 2FA from Shortcut—instead, enable 2-Step Verification for your Google Account.

If you want to add 2FA to your Shortcut account in addition to using Google OAuth, you may need to set a password before you can add 2FA.

## Turning on Two-Factor Authentication

1. Navigate to your **profile icon** or **photo**
2. Select **Settings**
3. Select **Security** under Your Account
4. Select **Two-Factor Auth**
5. Re-enter your Shortcut password when prompted, then press **Continue**
6. Scan the QR code with your authenticator app
7. Enter the code from your app and select **Confirm**
8. **Copy your Recovery Code** somewhere safe, then select **OK, I saved my recovery code**

> **Important:** Save your recovery code in a secure location. You'll need it if you lose access to your authenticator app.

## Logging in with Two-Factor Authentication

1. Enter your **username** or **email**
2. Enter your **password**
3. Select **Log In**
4. Enter your two-factor authentication code from your authenticator app (e.g., Google Authenticator, Authy)
5. Select **Log In** again

## Using Your Recovery Code

If you cannot access your authenticator app (for example, if you're logging in from a new device), you can log in using your recovery code:

1. On the login screen or 2FA screen, select **Need to use your recovery code?**
2. Enter your recovery code

If you've misplaced your recovery code, have someone with **Owner** or **Admin** permissions contact [Shortcut Support](/contact) to have your 2FA disabled.

## Turning off Two-Factor Authentication

1. Navigate to your **profile icon** or **photo**
2. Select **Settings**
3. Select **Security** under Your Account
4. Select **Two-Factor Auth**
5. Re-enter your Shortcut password and the code from your authenticator app
6. Select **Disable 2FA**