Skip to main content

Two-Factor Authentication (2FA)

Formstamper supports multiple two-factor authentication methods to secure your account.

Available Methods​

MethodDescription
Authenticator App (TOTP)Use apps like Google Authenticator, Authy, or 1Password to generate time-based codes
Email OTPReceive a one-time code via email when logging in

Setting Up TOTP (Authenticator App)​

  1. Go to Account → Security & Authentication.
  2. Click Authenticator App under the 2FA section.
  3. Scan the displayed QR code with your authenticator app.
  4. Enter the 6-digit code from your app to verify.
  5. Save your backup codes — these are one-time recovery codes in case you lose access to your authenticator.
caution

Store your backup codes somewhere safe. If you lose your authenticator and your backup codes, you'll need to contact an administrator to reset your 2FA.

Setting Up Email OTP​

  1. Go to Account → Security & Authentication.
  2. Click Email OTP under the 2FA section.
  3. A verification code is sent to your registered email.
  4. Enter the code to confirm and activate Email 2FA.

How 2FA Login Works​

With 2FA enabled, the login flow becomes:

  1. Enter your email and password as usual.
  2. If 2FA is enabled, you're prompted for a verification code.
  3. Enter the code from your authenticator app or email.
  4. Access is granted.

Backup Codes​

When setting up TOTP, you receive a set of backup codes. These are single-use codes that bypass your authenticator:

  • Each code can only be used once.
  • Store them securely (password manager, printed copy in a safe location).
  • If you use all your backup codes, reconfigure 2FA to generate new ones.

Changing or Disabling 2FA​

  1. Go to Account → Security & Authentication.
  2. Your current 2FA method is displayed.
  3. Click Reconfigure to switch methods or re-setup.
  4. To disable 2FA entirely, contact your organization administrator.
tip

We strongly recommend enabling 2FA for all accounts, especially those with admin or super admin roles. Formstamper prompts users to set up 2FA during sign-up and login if it's not already configured.