# Enable two-factor authentication (2FA)

Two-factor authentication (2FA) adds an extra layer of protection to your Databox account. It requires two forms of verification: something you know (your email and password) and something you have (a temporary code generated by an authenticator app on your device). By combining these two factors, 2FA makes it much harder for unauthorized users to gain access, even if your password is compromised.

## Enable two-factor authentication

1. Click your **profile avatar** and select [**My profile**.](https://app.databox.com/?customize=profile)
2. Scroll to the **Account security** section and click **Enable 2FA** next to **Two-factor authentication**.
3. In the **Set up two-factor authentication** window, open your authenticator app and scan the QR code. If you can't scan it, copy the **Setup key** and enter it in the app manually.
4. Click **Next** and enter the code generated by your app to confirm.
5. Download your **recovery codes** and store them somewhere safe. They're how you sign in if you lose access to your authenticator app.


Your QR code and setup key are the secret behind your 2FA codes. Don't share them or capture them in screenshots — anyone who has them can generate valid codes for your account.

### ![lock](/assets/lock.2fb1bbc208afcc03d15a0a45f22bdf7f830322016e038e5721965851130807af.419bb737.svg) Require two-factor authentication for all users

Account administrators can enforce two-factor authentication for every user in the account. If your organization has accounts, this setting applies only to organization users — account users are not affected.

To require 2FA for all users:

1. Go to [Account Management > Advanced security > Two-factor authentication.](https://account.databox.com/security/two-factor)
2. Switch on the **Require two-factor authentication for all users** toggle.
3. Confirm in the pop-up by clicking **Yes**.


## Disable two-factor authentication

1. Click your **profile avatar** and select [**My profile**.](https://app.databox.com/?customize=profile)
2. Scroll to the **Account security** section and click **Disable 2FA** next to **Two-factor authentication**.
3. **Enter your current two-factor authentication code** from your authenticator app to confirm.
4. Once the code is verified, two-factor authentication will be disabled on your account.


Sign in using one of the **recovery codes** you downloaded during setup. Each code works once. If you've used them all or can't find them, contact Databox Support at [help@databox.com](mailto:help@databox.com) to verify your identity and regain access.

Any standard authenticator app that supports TOTP (time-based one-time password) works, such as Google Authenticator and Duo Mobile.

Ask Genie
Get instant answers or help with your data using the in-app AI assistant.

Talk to an expert
For customers: Get help with your setup, strategy, or making the most of Databox.

Book a demo
New to Databox? See how it works and get guidance on getting started.

Send an email
Reach out to support for help with your account, data, or technical issues.