Guide

Set up two-factor authentication

Add an authenticator app as a second sign-in step, and learn what signing in looks like afterwards.

3 min readAccount & securityUpdated October 25, 2026
Open in the app

Two-factor authentication (Softalon calls it MFA) adds a second step to every sign-in. After your password, code or provider sign-in, you also enter a 6-digit code from an authenticator app on your phone. Someone who steals your password still can't get in without your phone.

Before you start

  • An authenticator app on your phone. The setup screen recommends Google Authenticator, Microsoft Authenticator or Authy.
  1. 1

    Step 1 of 4

    Open the MFA card

    Go to Account β€Ί Security. In the MFA card, find Authenticator App (TOTP) and click Setup.

    If you signed in more than 15 minutes ago, Softalon first asks you to confirm it's you.

  2. 2

    Step 2 of 4

    Scan the QR code

    In Setup Authenticator App (TOTP), open your authenticator app and scan the QR code.

    If you can't scan it, copy the code shown under In case you cannot scan the QR code, you can enter the code manually and add it to your app by hand.

  3. 3

    Step 3 of 4

    Verify the code

    Your app now shows a 6-digit code for Softalon. The code changes every 30 seconds. Type the current code and click Verify and Setup.

    You will see:

    The Authenticator App (TOTP) row shows a Remove button instead of Setup.

  4. 4

    Step 4 of 4

    Save recovery codes

    In the same card, set up Recovery Codes so you can still sign in if you lose your phone. See Save and use recovery codes.

Signing in with two-factor authentication

After you sign in with your password, a login code or a provider, the Verify Your Identity screen appears:

  1. Type the 6-digit code from your authenticator app in the Code field.
  2. Click Continue.

If you also added a security key, the screen shows tabs for Authenticator App (TOTP) and Security Key.

If you don't have your phone, click Use Recovery Code next to Lost access to your MFA device? and enter one of your recovery codes.

Turn off the authenticator app

Go to Account β€Ί Security β€Ί MFA and click Remove next to Authenticator App (TOTP). Softalon may ask you to confirm it's you first.

If something is off

The code from my app is rejected

Authenticator codes depend on your phone's clock. Turn on automatic date and time on your phone, then try the newest code.

I lost my phone

Use a recovery code on the Verify Your Identity screen. Then remove the old authenticator and set it up again on your new phone. See I can't sign in.

Common questions

No. It's optional, but once you turn it on, Softalon asks for it on every sign-in.