Securing your account with two-factor authentication

Set up TOTP two-factor authentication, save your backup codes, and understand which actions require it.

Last updated Sep 14, 2026

What you’ll need

  • An authenticator app such as Google Authenticator, 1Password, or Authy

This guide shows you how to turn on two-factor authentication (2FA) for your AuditHalo account. 2FA adds a time-based code from your phone on top of your password, so a stolen password alone cannot get into your account.

AuditHalo uses TOTP, the standard supported by apps like Google Authenticator, 1Password, and Authy. Set it up from your account page at /dashboard/account.

Set up two-factor authentication

  1. Go to /dashboard/account.
  2. In the security section, select Enable two-factor.
  3. Scan the QR code with your authenticator app. If you cannot scan, enter the secret manually.
  4. Enter the 6-digit code your app shows.
  5. Select Verify and enable.

[Screenshot: the two-factor setup step showing the QR code and the verification code field]

Save your backup codes

After you enable 2FA, AuditHalo shows a set of single-use backup codes. Use one to sign in if you ever lose access to your authenticator app.

  1. Copy the backup codes and store them somewhere safe, separate from your password.
  2. Select I've saved my backup codes.

Warning: Backup codes are shown once and each works only once. If you lose both your authenticator app and your backup codes, you may be locked out of your account. Store the codes before you leave this screen.

Where two-factor is required

Some sensitive actions require a 2FA code even after you sign in. For HR admins, these include:

  • Inviting another HR admin.
  • Deactivating a member.
  • Exporting the audit log.

Setting up 2FA ahead of time means these actions are never blocked when you need them.

Turn off two-factor

  1. Go to /dashboard/account.
  2. In the security section, choose to disable two-factor.
  3. Confirm with your password and a current 6-digit code.

Note: Disabling 2FA removes a layer of protection and, for HR admins, will block the 2FA-gated actions above until it is re-enabled.

What's next

Related articles

Frequently asked questions

What authenticator apps work with AuditHalo?

Any TOTP authenticator app, such as Google Authenticator, 1Password, or Authy.

What if I lose my authenticator app?

Use one of the backup codes shown when you enabled two-factor authentication. Each code works once, so store them somewhere safe.

When is two-factor authentication required?

For HR admins, inviting another HR admin, deactivating a member, and exporting the audit log all require a two-factor code.