Securing Your Account with MFA
Turn on two-factor authentication, save your backup codes, and recover access if you lose your phone.
What Two-Factor Authentication Does
Two-factor authentication (MFA or 2FA) adds a second step to signing in. After your password you also enter a 6-digit code that changes every 30 seconds, made by an authenticator app on your phone. Even if someone learns your password, they cannot get in without that code. It applies to Google sign-in too.
Turning On Two-Factor
Install an authenticator app first (for example Google Authenticator, Microsoft Authenticator, Authy or 1Password).
- 1Open your account page (ballengine.app/settings) and scroll to Two-factor authentication.
- 2Press the button to enable it.
- 3Step 1: scan the QR code with your authenticator app, or type the code shown under it.
- 4Step 2: enter the 6-digit code your app now shows for BallEngine.
- 5Save the backup codes that appear before you leave the page.
Tip
- The QR code and the manual code are secrets. Do not screenshot or share that screen.
Backup Codes
When two-factor is on you get 10 one-time backup codes. They are your way back in if you lose your phone. Store them somewhere safe and separate from your phone: a password manager, a printed copy or an encrypted note. To get a fresh set, use Rotate codes in the same section and confirm with a current code; the old codes stop working at once.
Turning Two-Factor Off
In the same section press Disable and confirm with a current code from your authenticator app. From then on your password alone signs you in.
If You Lose Your Phone
Sign in with your password and use one of your backup codes. Once you are in, set up two-factor again on your new phone and save the new backup codes. If you have lost both your phone and your backup codes, open a ticket at ballengine.app/support under Account & Login and we will help you prove the account is yours.
More from BallEngine
Guides, plans and answers for making your videos.