# Two Factor Authentication

## Purpose

Provide additional account protection.

---

# Preferred Method

TOTP authentication.

Compatible with:

- Google Authenticator.
- Microsoft Authenticator.
- Authy.

---

# Flow

Enable 2FA:

User requests setup

↓

Generate secret

↓

Display QR code

↓

User scans

↓

User confirms code

↓

Enable 2FA

---

# Login Flow

Password/OAuth

↓

Request authenticator code

↓

Validate

↓

Login

---

# Recovery

Support:

- Backup codes.
- Disable/reset through account recovery.

---

# UX Requirements

Explain clearly:

- Why enable 2FA.
- How it works.
- Recovery options.