# Two-Factor Authentication (2FA) Setup Guide

**Overview**\
Two-factor authentication (2FA) adds an extra layer of security to your MGS account. Once enabled, signing in will require your password and a one-time code from your mobile device. This applies to all user types, including Tenant Admins, Standard Registry and Policy User accounts.

**Access Your Profile**

* Log into your MGS account.
* Click your user name at the bottom left of the sidebar.
* Click the **three-dot (ellipsis) menu** next to your user name and select **Profile**.
* Find "Security Settings."
* Click **Setup** next to Two-factor authentication.

**Start the Setup Process**

* A window will open titled “Enable two-factor authentication.”

**Scan the QR Code or Enter the Key**

* Open an authenticator app on your mobile device (such as Authy, Google Authenticator, or similar).
* Scan the QR code displayed on the screen.
* If you cannot scan the code, copy the provided key and enter it manually into your authentication app.

**Enter the Code From Your Authenticator App**

* The authenticator app will generate a 6-digit code.
* Enter this code in the “Code” field.
* Click **Enable**.

**Download Your Recovery Codes**

* After enabling 2FA, you will be prompted to download your recovery codes.
* Save these codes in a safe place. If you ever lose access to your authenticator app, you can use a recovery code to log in.

**2FA Status Confirmation**

* Once setup is complete, your profile will display:\
  Two-factor authentication true: **Active**
* You can deactivate 2FA at any time from this screen if needed.

**Additional Notes**

* 2FA is optional but strongly recommended for all users.
* The setup process is the same for both Standard Registry and Policy User accounts.
* If you lose both your authenticator app and recovery codes, contact MGS support for assistance.