Skip to main content

Two-Factor Authentication

Two-factor authentication (2FA) adds a second step to sign-in: after your password, you also enter a time-based one-time code from an authenticator app. Even if your password leaks, your account stays protected.

How it works​

Kvery uses TOTP (the standard behind apps like Google Authenticator, 1Password and Authy). When you enable 2FA, Kvery shows you a setup image — a QR code — that you scan with your authenticator app. The app then generates a fresh 6-digit code every 30 seconds.

Enabling 2FA​

  1. Go to your profile and start the 2FA setup.
  2. Kvery displays the setup image (QR code).
  3. Scan it with your authenticator app.
  4. Enter the current code from the app to verify and turn 2FA on.

From then on, each login asks for your password and then a current code.

Signing in with 2FA​

After entering your password, Kvery prompts for the 6-digit code. Open your authenticator app, read the current code for Kvery, and enter it.

Disabling 2FA​

You can turn 2FA off from your profile if you need to. Do so only if you're sure — disabling it removes the second layer of protection.

tip

Keep a backup of your authenticator (most apps support secure backup or multi-device sync) so you don't lose access if you change phones.

Tips​

  • Pair 2FA with a strong, unique password for the best protection.
  • For shared API access, prefer scoped tokens — for example MCP tokens — over sharing account credentials.