> ## Documentation Index
> Fetch the complete documentation index at: https://docs.arterial.us/llms.txt
> Use this file to discover all available pages before exploring further.

# Two-factor authentication (MFA)

> Turn on TOTP MFA, sign in with a code, and manage factors from Settings.

The dashboard uses **time-based codes** from an authenticator app (often called TOTP). The in-app help card names common apps such as Google Authenticator, Authy, 1Password, and Bitwarden.

## Turn MFA on

1. Sign in to the dashboard.
2. Open **Settings** (from the sidebar or the user menu in the top bar).
3. In the **Security** card, click **Manage Two-Factor Authentication**.

You are taken to the **Two-Factor Authentication** page. From there, start enrollment when the **Enable Two-Factor Authentication** (or similar) control is available.

Typical enrollment steps:

1. The app shows a **QR code** and sometimes a **secret** you can type manually.
2. In your authenticator app, add a new account and scan the QR code (or enter the secret).
3. Enter the **6-digit code** the app generates to **verify** enrollment.
4. After verification, the Settings page should show MFA as **Active** or **enabled**.

Your organization may require MFA. If you cannot complete setup, contact a workspace administrator.

## Sign in with MFA

After you enter email and password, you may land on **MFA verification**. Open your authenticator app and type the current code for the dashboard account.

## If you are locked out

* Use another device where you are still signed in to reach **Settings** and review MFA status, if possible.
* Try **password recovery** if the problem is the password, not the code. See [Password reset and recovery](/account/password-recovery).
* Ask a workspace administrator or Arterial support. They may need to reset factors on your account according to your organization’s policy.

## Backup methods

The MFA settings page may reference a **backup authenticator** or similar option when your product version enables it. Follow on-screen labels when they appear.

## Disable or change MFA

When the product shows **Disable** or **Set up backup authenticator** next to an active factor, use those controls carefully. Disabling MFA lowers account security. Some organizations may not allow self-service disable.

***

## Related topics

* [Sign in and sign out](/account/sign-in-and-out)
* [Settings overview](/settings/overview)
