# Set up two-step verification

Add an authenticator app to your sign-in and understand when verification is required.

Canonical: https://demo.qixcount.com/help/people-and-security/two-step-verification

Who can do this: People managing their own QixCount account

Where: Security settings

You'll need: An authenticator app to enable verification; your password to disable it, with no business requiring it

Two-step verification adds a code from an authenticator app after your password. QixCount labels this two-factor authentication. It protects your account across businesses.

## Enable verification

1. Open **Security settings** from the account menu. In the firm portal, select **Account security**.
2. Select **Enable Two-Factor Authentication**.
3. Scan the displayed QR code with your authenticator app, or enter the displayed secret manually in the app.
4. Enter the **6-digit code from your app**.
5. Select **Enable Two-Factor Authentication**.
6. Select **Reveal Codes** to read your [recovery codes](https://demo.qixcount.com/help/people-and-security/recovery-codes), or use **Copy All** or **Download** to save them.

If setup opens automatically after sign-in or firm registration, follow the same QR-code and confirmation steps. The app must generate a valid six-digit code before setup is confirmed.

## Sign in with verification

After entering your password, enter your app’s current code in **Authentication Code** and select **Verify**. If you lose access to the app, select **Use a recovery code** and enter one unused recovery code in the separate dialog.

## Change your authenticator

The setup page does not replace an already enabled authenticator. In your security settings, select **Disable 2FA**, enter your password, and confirm before setting up another device.

If any of your businesses requires two-factor authentication, QixCount blocks disabling it. Contact support if you cannot use your existing app or recovery codes. Disabling it also prevents entry to the firm portal until you enable it again.

Next, [save or replace recovery codes](https://demo.qixcount.com/help/people-and-security/recovery-codes).

## Good to know

A business can require it, and the firm portal always requires it.