# Two-factor authentication (2FA): an overview

**Category:** [Account Security & Sign-in](https://help.totalctrl.app/hc/totalctrl/totalctrl-help-center/en-US/categories/account-security)
**Updated:** 2026-08-19

## What is two-factor authentication?

Two-factor authentication (2FA) adds a second step to signing in, so a stolen password alone is not enough to access your account. After entering your password, you confirm your identity a second way.
### Methods TotalCtrl supports

- **Authenticator app (recommended)** — an app such as Google Authenticator, Authy, 1Password, or Microsoft Authenticator generates a rotating 6-digit code. Works offline and needs no phone signal.
- **Passkeys** — sign in with Face ID, Touch ID, Windows Hello, or a hardware security key. No password or code required.
- **Text message (SMS)** — a 6-digit code is texted to your verified phone number. Available only if your administrator has enabled SMS.
- **Email** — a 6-digit code is emailed to you. This is the default fallback and needs no setup.

### Which should I use?

We recommend setting up an **authenticator app** or a **passkey**. Both are more secure than text messages, which can be intercepted or affected by SIM-swap attacks. You can always fall back to an email code if you do not have your other method handy.
### How sign-in chooses a method

If you have set up an authenticator app, TotalCtrl asks for that code first. Otherwise it uses SMS (if enabled and your phone is verified), and otherwise email. On the verification screen you can switch to email at any time with *“Verify with email instead.”*

---

## Related Articles

- [Backup codes](https://help.totalctrl.app/en-US/articles/backup-codes)
- [Set up an authenticator app](https://help.totalctrl.app/en-US/articles/set-up-authenticator-app)
- [Configure an SMS provider (administrators)](https://help.totalctrl.app/en-US/articles/configure-sms-provider-admin)
- [Troubleshooting 2FA and passkeys](https://help.totalctrl.app/en-US/articles/troubleshooting-2fa-passkeys)
- [Sign in with a passkey](https://help.totalctrl.app/en-US/articles/sign-in-with-a-passkey)

---
[← Back to TotalCtrl Help Center](https://help.totalctrl.app/en-US/)