Back to Help

How do I enable two-factor authentication (2FA)?

· In settings → 2FA you enable TOTP with your authenticator app.

How do I enable two-factor authentication (2FA)?

2FA gives you a second wall of protection for your account. Even if someone has your password, they can't get in without your 2FA code.

What you need

An authenticator app on your phone:

  • Google Authenticator (iOS / Android, free)
  • Authy (iOS / Android, with backup)
  • 1Password (has 2FA built in, premium)
  • Microsoft Authenticator (also for Apple/Google accounts)
  • Bitwarden (premium has 2FA)

Install one before you start.

How to do it

  1. Open Settings (/dashboard/settings)
  2. Find the "Two-factor authentication" section
  3. Click "Enable 2FA"
  4. A QR code appears on screen
  5. Open your authenticator app on your phone
  6. Pick "New account" or "+" in the app
  7. Scan the QR code with your phone camera
  8. The app now shows a 6-digit code — it changes every 30 seconds
  9. Enter the current code in the LACOP field
  10. Click "Confirm"
  11. 2FA is active ✅

Backup codes (IMPORTANT)

After activation you get (depending on setup) backup codes. These are single-use codes for emergencies — e.g. if you lose your phone.

IMPORTANT:

  • Print them or store them offline (e.g. password manager)
  • Not on the same device as your authenticator app
  • Each code works only once

Next login

After activation:

  1. Enter email + password as usual
  2. Extra step: enter the 6-digit code from your authenticator app
  3. You're logged in

Lost phone / deleted app?

  • Use backup codes (if you saved any)
  • Authy users: install app on new phone, restore account
  • Google Authenticator: older versions have no cloud backup — without backup codes contact support@lacop.app

Multiple devices?

You can set up 2FA on multiple devices at once:

  • During activation: scan the QR code with multiple apps (e.g. phone + tablet)
  • That gives you automatic backup if one device is lost

Why 2FA?

  • Password leaks are common — 2FA protects then too
  • Phishing — even if you fall for fake sites, attackers need the code
  • Admin requirement: LACOP requires 2FA for admin accounts

Disable 2FA

See disable 2FA.

Questions? support@lacop.app

Still need help? Contact support

Response within 24h