> OctoPerf load testing - User Profile documentation page. How to manage Two-factor authentication.

Source: https://api.octoperf.com/doc/account/profile/two-factor/

# Two-Factor Authentication (2FA)

Two-Factor Authentification is accessible from the [profile management](https://api.octoperf.com/doc/account/profile/) page, in the _Password_ section.

![2FA-location](https://api.octoperf.com/doc/account/profile/two-factor/img/2FA-disabled.png "2FA-location")

## Prerequisite

To use 2FA, you or your organisation must use an authenticator app or browser extension.
Some examples are :

* FreeOTP Authenticator
* Bitwarden
* Google Authenticator
* Microsoft Authenticator

many more exist, but we recommend those applications.

## Enabling 2FA

![2FA-creation-dialog](https://api.octoperf.com/doc/account/profile/two-factor/img/2FA-creation-dialog.png "2FA-creation-dialog")

Once your authenticator downloaded, you will have to scan the QR Code with said authenticator.
The authenticator will give you a one time password that is needed in Octoperf to finish setting up 2FA.

!!! tip  
    ![setup-key](https://api.octoperf.com/doc/account/profile/two-factor/img/setup-key.png "setup-key"){ align=right }
    If your authenticator does not allow for a QR scan, you can also copy the setup key and paste it in your authenticator.

![recovery-codes](https://api.octoperf.com/doc/account/profile/two-factor/img/recovery-codes.png "recovery-codes")
<br>
Verifying successfully will prompt recovery codes to you. Those codes can be used in case your authenticator isn't working, or you removed Octoperf from your authenticator without disabling 2FA.

!!! warning
    Please keep these codes as you will not be able to see them after this.

## Disabling 2FA

2FA can be disabled at any time once you are logged in your account from the same button.
![2FA-enabled](https://api.octoperf.com/doc/account/profile/two-factor/img/2FA-enabled.png)

You will be prompted to enter your authenticator verification code or one of your recovery codes.
Once the popup closes, you have successfully disabled 2FA on your account.

## 2FA Login

If 2FA is enabled on your account, **after your basic authentication**, you will be prompted with your 2FA verification.
Use the code provided by your authenticator.
![login-2FA](https://api.octoperf.com/doc/account/profile/two-factor/img/login-2FA.png "login-2FA")

!!! note
    if you cannot enter your authenticator code, click on _Use recovery code_ and enter one of your recovery codes.
    ![login-recovery](https://api.octoperf.com/doc/account/profile/two-factor/img/login-recovery.png "login-recovery")

## Locked out of your account

If you lose access to your authenticator app **and** no longer have your recovery codes, you will not be able to log in on your own.

In this case, a **platform administrator can disable two-factor authentication** for your account so you can sign in again with your password. See [Two-factor authentication in Users administration](https://api.octoperf.com/doc/administration/#two-factor-authentication).