Two-Factor Authentication
2FA adds an extra security layer — you need both your password and a one-time code to log in.
Setting up 2FA
- Open Security in Settings and click Enable 2FA.
- Open an authenticator app (Google Authenticator, Authy, or 1Password).
- Scan the QR code on screen.
- Enter the 6-digit code to confirm setup.
When 2FA is required on your account
Whoever set up your account can require 2FA for it. If they have, the first time you sign in you'll be asked to set it up before you reach your dashboard:
- Enter your email and password as usual.
- Add the account to your authenticator app. On a phone, tap Open in authenticator app, or copy the key into the app. On a computer, scan the QR code.
- Enter the 6-digit code the app shows.
- Save your recovery codes, tick that you've saved them, and continue to your dashboard.
The setup screen stays open for ten minutes. If it times out, sign in again to start over.
Logging in with 2FA
After your password, enter the 6-digit code from your authenticator app. Codes refresh every 30 seconds.
Changing your password
While 2FA is on, changing your password under Security in Settings also asks for the 6-digit code from your authenticator app.
Disabling 2FA
Open Security in Settings and click Disable 2FA. You'll need your current password and a valid code.
If 2FA is required on your account, there's no Disable 2FA button. Only whoever set up your account can lift the requirement.
Lost your authenticator app
If you saved your recovery codes:
- Sign in with your email and password. On the code step, choose Use a recovery code instead and enter one of your codes. Each code works only once.
- Open Security in Settings and click Replace authenticator. Choose I don't have my authenticator — use a recovery code, then confirm with your password and another recovery code.
- Set up your new app as you did the first time. You'll get a new set of recovery codes.
This works even when 2FA is required on your account.
If you have neither your authenticator app nor a recovery code, contact Helm support at contact@usehelm.host. Support can reset two-factor authentication on your account. This signs you out everywhere, and your old recovery codes stop working. You'll get an email saying 2FA was turned off. If 2FA is required on your account, you'll set it up again the next time you sign in.