Documentation

Two-Factor Authentication

Add an extra layer of security to your Agentkit account.

Two-factor authentication (2FA) adds an extra layer of security by requiring a verification code in addition to your password when signing in.

Why Use 2FA

  • Protects against password theft - Even if someone gets your password, they can't access your account without the second factor
  • Required for sensitive operations - Some actions may require 2FA verification
  • Industry best practice - Recommended for all accounts with valuable data

Setting Up 2FA

Requirements

Before enabling 2FA, you'll need:

  • An authenticator app on your phone:
    • Google Authenticator (iOS/Android)
    • Authy (iOS/Android)
    • 1Password (iOS/Android/Desktop)
    • Microsoft Authenticator (iOS/Android)

Enable 2FA

  1. Open Settings → Profile from the sidebar
  2. Find the Multi-Factor Authentication card
  3. Click Set up a new factor
  4. Enter a name for your factor (e.g. "My Phone")
  5. Scan the QR code with your authenticator app
  6. Enter the 6-digit verification code
  7. Click Enable factor to complete setup

Signing In with 2FA

Once enabled, signing in requires two steps:

  1. Enter your email and password as usual
  2. Enter the 6-digit code from your authenticator app
  3. Codes refresh every 30 seconds

Managing 2FA

Remove a Factor

To remove a two-factor authentication factor:

  1. Open Settings → Profile from the sidebar
  2. Find the Multi-Factor Authentication card
  3. Click the remove button next to the factor
  4. Confirm removal

Note: Removing all factors disables 2FA.

Recovery

Lost Authenticator Access

If you've lost access to your authenticator app but are still signed in on another device:

  1. Open Settings → Profile from the sidebar
  2. Find the Multi-Factor Authentication card
  3. Remove the old factor
  4. Set up a new factor with your new device

Fully Locked Out

If you've lost access to your authenticator and cannot sign in:

  1. Visit agentkit.ai and use the support chatbot to request account recovery
  2. You will need to verify your identity
  3. Support can disable 2FA after identity confirmation

Security Best Practices

Do

  • Keep your authenticator app updated
  • Use a separate device for authentication if possible
  • Review active sessions periodically

Don't

  • Use SMS-based 2FA (authenticator apps are more secure)
  • Ignore suspicious sign-in attempts

Troubleshooting

Code Not Working

  • Check your device time is synced automatically
  • Ensure you're using the code for Agentkit (not another service)
  • Codes expire every 30 seconds - wait for a new one
  • Try entering the code as soon as it appears

Authenticator Lost

  • If still signed in elsewhere, remove and re-add your factor from Settings → Profile
  • If fully locked out, visit agentkit.ai and use the support chatbot to request recovery

Next Steps