Turning on two-factor authentication
With two-factor authentication, after your password you also enter a code from your phone. That keeps your website safe, even if someone knows your password.
What do you need?
An authenticator app on your phone, for example Microsoft Authenticator, Google Authenticator or the app of your password manager.
Turning it on
As long as two-factor authentication is off, you see an orange Enable 2FA button next to your name at the top right (also at the top of the menu under your name). Click it and continue at step 3. Or via your profile:
- Click your name or photo at the top right and choose Edit profile.
- Under Two-factor authentication, click Set up.
- Scan the QR code with the authenticator app.
- Enter the six-digit code from the app and click Activate.
- You get recovery codes. Keep them in a safe place, for example in your password manager: use Copy or Download. Tick I have saved the recovery codes and click Continue.
Logging in with a code
After your password, the CMS asks for the code from the app. Tick Remember this device for 30 days on your own computer, so you don't have to do it every time.
Lost your phone?
When entering the code, click Lost your phone? Use a recovery code and enter one of your recovery codes. Each recovery code works once. Run out of recovery codes too? Contact us and we'll reset it for you.
New recovery codes or turning it off
Almost out of codes? Choose Edit profile → Two-factor authentication → New recovery codes; the old ones then stop working. There you can also Turn off two-factor authentication, unless it is required for your account.