---
id: help.security.two-step
title: "Turn on two-step verification"
canonical: https://docs.secureprocessing.app/help/security/turn-on-two-step-verification
description: "Open , press , scan the code with an authenticator app and enter the six digits it shows. After that, signing in needs your password or passkey and that code."
last_verified: 2026-11-01
---

# Turn on two-step verification

Open **Settings → Security**, press **Set up**, scan the code with an authenticator app and enter the six digits it shows. After that, signing in needs your password or passkey and that code.

## Set it up

1. Install an authenticator app on your phone, if you do not have one.
2. Open **Settings → Security** in the dashboard.
3. Under **Two-step verification**, press **Set up**.
4. Scan the code with your authenticator, then enter the six-digit code it shows.

## Save your backup codes

Under **Backup codes**, press **Generate backup codes**. You get ten, shown only this once. Keep them somewhere that is not this phone, because they are how you get back in if you lose it.

## When it is required

- **Once your business is approved for live payments**, everyone on your team needs it.
- **An owner or administrator can require it** for everyone earlier, under **Settings → Team**.

Anyone who has not set it up is asked to the next time they sign in. If you turn it off while your business requires it, you are asked to set it up again before you can carry on.

## When we ask again

Some actions need a code from the last ten minutes, even when you are signed in, such as changing payouts or your team. Turning two-step verification off needs one from the last five.

For developers: [Team roles and permissions](https://docs.secureprocessing.app/team-roles.md)

## Related

- [Lost your phone? Get back into your account](https://docs.secureprocessing.app/help/security/lost-your-phone.md)
- [Sign in with a passkey](https://docs.secureprocessing.app/help/security/sign-in-with-a-passkey.md)
- [I can’t sign in](https://docs.secureprocessing.app/help/troubleshooting/i-cant-sign-in.md)

Still stuck? Write to [admin@secureprocessing.app](mailto:admin@secureprocessing.app) with the email address you sign in with.