> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.mailreach.co/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# How to enable two-factor authentication (2FA) on your MailReach account

# How to enable two-factor authentication (2FA) on your MailReach account

Two-factor authentication adds an extra layer of security to your MailReach account. Once enabled, signing in will require both your password and a temporary code generated by an authenticator app on your phone — so even if someone gets your password, they can't access your account.

Here's how to turn it on in less than a minute.

## Before you start

You'll need an authenticator app installed on your phone. Any of these work:

* Google Authenticator
* Microsoft Authenticator
* 1Password
* Authy
* Bitwarden

## Step 1 — Open your account settings

In the top-right corner of the MailReach app, click your profile icon (the colored circle with your initial), then click **Settings**.

## Step 2 — Go to the Security tab

In the left-hand sidebar of the Settings page, click **Security**.

## Step 3 — Turn on 2FA

In the **Two-factor authentication** section, click **Enable 2FA**.

You'll be prompted to:

1. **Scan the QR code** with your authenticator app. The app will start generating a new 6-digit code every 30 seconds.
2. **Enter the current 6-digit code** from your authenticator app to confirm that everything is set up correctly.
3. **Save your recovery codes** in a safe place (a password manager works great). These codes are your backup if you ever lose access to your authenticator app — without them, you may be locked out of your account.

Once confirmed, you'll see a green dot next to **"Two-factor authentication is on."**

That's it — 2FA is now active on your account.

## What happens next

The next time you sign in to MailReach, you'll be asked for your password as usual, then for the current 6-digit code from your authenticator app.

## Managing 2FA

From the same Security page, you can:

* **Generate new recovery codes** — useful if you've used your existing codes or think they may have been exposed. Generating new codes invalidates the old ones.
* **Disable 2FA** — if you ever need to turn it off (though we strongly recommend keeping it on).

## Lost access to your authenticator app?

Use one of your recovery codes to sign in. Once you're back in, head to **Settings → Security** and re-configure 2FA with your new device, then generate a fresh set of recovery codes.

If you've lost both your authenticator app **and** your recovery codes, contact our support team at support@mailreach.co and we'll help you regain access.

---

**Security tip:** We recommend enabling 2FA on every account that holds sensitive data — your email, password manager, banking, and of course your deliverability tools. It's one of the highest-impact security habits you can adopt.