# Set up an authenticator app

**Category:** [Account Security & Sign-in](https://help.totalctrl.app/hc/totalctrl/totalctrl-help-center/en-US/categories/account-security)
**Updated:** 2026-08-19

## Set up an authenticator app

An authenticator app generates a fresh 6-digit code every 30 seconds. You will enter that code when you sign in.
### Before you start

Install an authenticator app on your phone, such as Google Authenticator, Authy, 1Password, or Microsoft Authenticator.
### Steps

- Go to **Profile → Security → Two-factor authentication**.
- Next to **Authenticator app**, click **Set up**.
- In your authenticator app, add a new account and **scan the QR code** shown on screen. If you cannot scan, tap “enter a key manually” in your app and type the key shown below the QR code.
- Your app now shows a 6-digit code. Type it into the **Verification code** box and click **Verify & enable**.
- TotalCtrl shows your **backup codes**. Save them somewhere safe (see the backup codes article) and click **Done**.

That is it — the next time you sign in, you will be asked for a code from your app.
### Turning it off

To disable the authenticator app, return to **Profile → Security** and click **Turn off** next to Authenticator app. You will fall back to email (or SMS) codes.

---

## Related Articles

- [Backup codes](https://help.totalctrl.app/en-US/articles/backup-codes)
- [Two-factor authentication (2FA): an overview](https://help.totalctrl.app/en-US/articles/two-factor-authentication-overview)
- [Configure an SMS provider (administrators)](https://help.totalctrl.app/en-US/articles/configure-sms-provider-admin)
- [Troubleshooting 2FA and passkeys](https://help.totalctrl.app/en-US/articles/troubleshooting-2fa-passkeys)
- [Sign in with a passkey](https://help.totalctrl.app/en-US/articles/sign-in-with-a-passkey)

---
[← Back to TotalCtrl Help Center](https://help.totalctrl.app/en-US/)