Two-factor authentication (MFA / 2FA) guide

Protect your agency accounts, connected ad accounts, and client metrics by enabling Time-based One-Time Password (TOTP) two-factor authentication.

Why MFA is essential for agencies

Agency accounts hold sensitive OAuth tokens with access to client ad budgets and proprietary analytics. Enforcing MFA prevents unauthorized access even if a team member's password is leaked or compromised.

How to enable 2FA

Step 1: Open account security settings

1. Click your profile avatar at the bottom of the left sidebar.
2. Select Account Settings.
3. Scroll down to the Two-Factor Authentication (MFA) section.
4. Click Enable 2FA.

User Profile (Bottom Sidebar) → Account Settings → Two-Factor Authentication → Click "Enable 2FA"

Step 2: Scan the QR code

1. Open your preferred authenticator app:
   • Google Authenticator (iOS / Android)
   • 1Password / Bitwarden / Apple Passwords
   • Authy / Microsoft Authenticator
2. Scan the on-screen QR code (or manually copy the 32-character secret key).

Step 3: Enter verification code and save backup codes

1. Enter the 6-digit verification code generated by your app.
2. Click Verify & Activate.
3. Download or copy emergency backup codes: Store these 10 one-time recovery codes in a secure password vault in case you ever lose access to your primary device.

Disabling or reconfiguring MFA

To migrate to a new smartphone:

1. Open Account Settings → Two-Factor Authentication.
2. Enter your current authenticator code to confirm identity.
3. Click Re-Configure Authenticator App and scan the new QR code.