Two-factor authentication (2FA) adds a second step to your Podpage login. After you enter your password, Podpage asks for a six-digit code from an authenticator app on your phone, so someone who learns your password still can't get in.
2FA is optional and available on every plan. Nothing changes for your account until you turn it on.
Before you start
You'll need an authenticator app on your phone, such as Google Authenticator, 1Password or Authy. Your account's email address also has to be verified. If it isn't, the Two-Factor Authentication page shows a Send Verification Email button instead of Activate. Click it, open the link in that email, then come back to finish setup.
How to turn on two-factor authentication
- In your dashboard, click your account (your name and email) at the bottom of the sidebar, then click Two-Factor Authentication.
- Next to Authenticator App, click Activate. If Podpage asks for your password again, enter it.
- Scan the QR code with your authenticator app. If you can't scan it, type the secret shown under Can't scan the code? into the app.
- Enter the six-digit code your app shows and click Activate.
- Podpage then shows your recovery codes. Download them or copy them somewhere safe, such as your password manager, then click Back to Dashboard.
Logging in with 2FA
From now on, after your email and password, Podpage asks you to enter the code from your authenticator app. Open the app, type the current six-digit code and click Sign In.
If you lose your phone
At the code prompt, enter one of your recovery codes in place of an app code. Each recovery code works once. After you sign in, go to Two-Factor Authentication to set up your new phone. Click View to see how many codes you have left, or Regenerate to get a fresh set.
Resetting your password does not turn off 2FA. If you've lost both your phone and your recovery codes, contact support.
Turning 2FA off
Go to Two-Factor Authentication and click Deactivate next to Authenticator App. Your account goes back to password-only login.
Tip: Every person on your team has their own login, so each teammate who can edit your site should turn on 2FA for their own account too.