---
keywords: two-factor authentication, 2FA, authentication, account security, MFA, multi-factor authentication, authenticator app, TOTP, password security, account protection, login security, security settings, two-factor, 2-step verification, account access
summary: Comprehensive guide to setting up and managing two-factor authentication (2FA) in your Manor account. Covers how to enable 2FA, configure authentication settings, and use authenticator apps or email verification for account security. Explains how 2FA protects your account and best practices for maintaining security.
---

# Authentication

## Overview

The Authentication section allows you to set up and manage two-factor authentication (2FA) for your Manor account. Two-factor authentication adds an extra layer of security by requiring a second verification method in addition to your password when logging in.

Two-factor authentication significantly reduces the risk of unauthorized access, even if someone obtains your password.

## Why Two-Factor Authentication Matters

Without 2FA, anyone who knows your password can access your account. With 2FA enabled:

- **Two verification methods required** — An attacker needs both your password AND your second authentication method
- **Protection against password breaches** — If your password is compromised, your account remains protected
- **Device confirmation** — Suspicious login attempts from unfamiliar devices are blocked
- **Peace of mind** — You're alerted when someone tries to access your account

## Accessing Authentication Settings

1. Click your name in the **top right corner** of Manor
2. Select **Authentication** from the profile menu
3. You'll see your current 2FA status and setup options

## Setting Up Two-Factor Authentication

### Step 1: Choose Your Authentication Method

Manor supports several 2FA methods:

- **Authenticator App** — Use an authenticator application on your phone (recommended)
- **Email Verification** — Receive verification codes via email
- **SMS (if enabled)** — Receive verification codes via text message

**Recommended:** Use an authenticator app (Google Authenticator, Microsoft Authenticator, Authy) for the fastest and most secure 2FA.

### Step 2: Enable 2FA

1. Click **Enable two-factor authentication** or **Set up 2FA**
2. Select your preferred authentication method
3. Follow the setup wizard:
   - **For authenticator apps:** Scan the QR code with your authenticator app and enter the 6-digit code to verify
   - **For email:** You'll receive a test verification code; enter it to confirm setup
   - **For SMS:** Enter your phone number and confirm the verification code

4. Save backup codes (see "Backup Codes" section below)
5. Click **Enable** or **Confirm** to activate 2FA

### Step 3: Save Your Backup Codes

After enabling 2FA, Manor provides **backup codes** — special codes that let you access your account if you lose access to your authentication device.

- Store backup codes in a **secure location** (password manager, safe deposit box)
- Treat backup codes like passwords — they grant full account access
- Each code can only be used once
- If you use all backup codes, generate new ones

## Using Two-Factor Authentication

### Logging In with 2FA

When you log in to Manor from a recognized device:

1. Enter your **username and password**
2. Manor displays the **2FA verification screen**
3. Enter the code from your authenticator app (or email/SMS)
4. Click **Verify** or **Confirm**

The login process completes, and you're logged in.

### First-Time Login from a New Device

When logging in from an unfamiliar device:

1. Enter your **username and password**
2. Manor recognizes the device as new
3. You must provide your **2FA code**
4. A **confirmation email** may be sent to your registered email address
5. You may need to click a confirmation link in the email
6. After confirmation, you're logged in

### Losing Your Authenticator Device

If you lose your phone or authenticator device:

1. Use a **backup code** from the codes you saved during 2FA setup
2. Enter the backup code when prompted for the 2FA code
3. Complete the login
4. Go to **Authentication settings** and set up a new authenticator or authentication method
5. Generate new backup codes

**Important:** Each backup code can only be used once. After using a backup code, it cannot be reused.

## Managing Your Authentication

### View Your 2FA Status

The Authentication section shows:

- Whether 2FA is currently **enabled or disabled**
- Which authentication method you're using
- When 2FA was **last enabled or updated**
- Remaining **backup codes**

### Change Your Authentication Method

To switch from one 2FA method to another:

1. Go to **Authentication settings**
2. Click **Change authentication method** or **Update 2FA**
3. Follow the setup wizard for the new method
4. Your old method will be replaced

### Disable Two-Factor Authentication

To turn off 2FA:

1. Go to **Authentication settings**
2. Click **Disable two-factor authentication**
3. Confirm that you understand the security risk
4. Enter your **password** to confirm the change
5. Click **Disable**

**Warning:** Without 2FA, your account is less secure. Only disable 2FA if you have a strong password and regularly monitor your account activity.

### Generate New Backup Codes

If you've used some or all of your backup codes:

1. Go to **Authentication settings**
2. Click **Generate new backup codes**
3. Store the new codes in a secure location
4. Your old backup codes will no longer work

## Authenticator App Setup

### Recommended Authenticator Apps

- **Google Authenticator** — Free, simple, available for iOS and Android
- **Microsoft Authenticator** — Works with Microsoft and other services
- **Authy** — Feature-rich with cloud backup and multi-device support
- **1Password** — Built-in authenticator within password manager
- **Bitwarden** — Open-source password manager with authenticator

### Setting Up an Authenticator App

1. Install your chosen authenticator app on your phone
2. During Manor 2FA setup, you'll see a **QR code**
3. Open your authenticator app and select **Scan QR code** or **Add account**
4. Point your phone camera at the QR code
5. The app captures the code and displays a **6-digit verification code**
6. Enter this code in Manor to verify the setup
7. Your authenticator app will now generate new 6-digit codes every 30 seconds

The app automatically updates codes; you always use the current code displayed on your screen.

## Best Practices

### Protect Your Account

- **Enable 2FA immediately** — Set up 2FA as soon as possible
- **Use an authenticator app** — Apps are more secure than email or SMS
- **Back up your codes** — Store backup codes securely offline
- **Don't share codes** — Never share 2FA codes with anyone, including Manor support
- **Monitor login alerts** — Review your device list regularly to ensure no unauthorized access

### Maintain Access

- **Keep your phone secure** — Your authenticator app is critical; protect your device
- **Store backup codes safely** — Use a password manager or secure storage
- **Update your phone backup** — If you switch phones, reinstall your authenticator app and restore your accounts
- **Test login after setup** — Verify 2FA works by logging out and back in

### Account Recovery

- **Save your backup codes** — Write them down or print them; store offline
- **Register alternative 2FA method** — Have an email 2FA or SMS backup ready
- **Keep your email secure** — Your email is used for password recovery and verification
- **Note important dates** — Remember when you enabled 2FA; check that it's still active

## Troubleshooting

### I Can't Log In with My 2FA Code

**Try these steps:**

1. Verify your **authenticator app is showing the correct time** — Incorrect time causes code failures
2. Enter the **current 6-digit code** displayed on your app (not previous codes)
3. Check for **leading zeros** — Some apps display codes like "012345"; ensure you enter all digits
4. Use a **backup code** if your authenticator isn't working
5. Try a different 2FA method (email or SMS)

**If still locked out:**

1. Go to the Manor login page
2. Look for **"Can't access your account?"** link
3. Use account recovery options (password reset, backup codes)
4. Contact Manor support with proof of account ownership

### My Authenticator App Code Isn't Working

**Possible causes:**

- **Time sync issue** — Your phone's time is wrong
  - Open your authenticator app and check the displayed code
  - Verify your phone's date and time are correct (Settings > Date & Time)
  - Restart your authenticator app
  
- **Code expired** — The 30-second code window passed
  - Each code is valid for ~30 seconds
  - Wait for the next code to appear and try again

- **Wrong account** — You're scanning the code for the wrong app
  - Verify the QR code shows "Manor" or your email address
  - Scan only codes provided during 2FA setup
  
- **App malfunction** — Your authenticator app has a problem
  - Uninstall and reinstall the authenticator app
  - Set up 2FA again with your Manor account

### I Lost My Authenticator Device

**Recover your account:**

1. At the login screen, enter your username and password
2. When asked for a 2FA code, click **"Can't access your authenticator?"** or **"Use backup code"**
3. Enter one of your saved backup codes
4. Complete the login
5. Immediately go to **Authentication settings** to set up a new authenticator app or method
6. Generate new backup codes and save them securely

### I Want to Switch to a New Phone

**Prepare before switching phones:**

1. Install your authenticator app on your new phone
2. In your old authenticator app, find the Manor account entry
3. Open the entry and note the **setup key** or **QR code** (some apps allow you to export this)
4. On your new phone, add a new account to your authenticator app using the setup key or QR code
5. Verify the new phone generates the same 6-digit codes as your old phone
6. You can now safely uninstall the authenticator app from your old phone

## Related Features

- **[Devices](profile-devices.md)** — Manage active login sessions and see where you're logged in
- **[Password](password-management.md)** — Change your login password and other security settings
- **[User Profile](user-profile.md)** — View and manage other account settings
- **[Activity Log](activity-log.md)** — Monitor all activity on your account