---
title: "Enable two-factor authentication on your Kanal account"
description: "Protect your Kanal login with a 6-digit code generated by an authenticator app, and keep your recovery codes safe."
url: https://help.getkanal.com/en/articles/141-enable-two-factor-authentication-on-your-kanal-account
collection: "FAQ"
updated: 2026-11-10
language: en
alternates: [fr-fr]
---

# Enable two-factor authentication on your Kanal account

Protect your Kanal login with a 6-digit code generated by an authenticator app, and keep your recovery codes safe.

Two-factor authentication adds a step to your login: on top of your usual sign-in method, Kanal asks for a 6-digit code generated by an app on your phone. Even if someone gets hold of your password, they cannot get into your account without that code.

## Enable two-factor authentication

You need an authenticator app on your phone, for example Google Authenticator, 1Password or Authy.

1.  Click your team name, then **Settings**.
    
2.  In the Account section, open **My Profile**.
    
3.  On the **Two-factor authentication** line, click **Enable**.
    
4.  Scan the QR code with your authenticator app. You can also type in the key shown under the QR code.
    
5.  Enter the 6-digit code shown by the app, then click **Enable**.
    
6.  Kanal shows your 8 recovery codes. Click **Copy codes**, store them somewhere safe, then click **I have saved my codes**.
    

![My Profile page in Kanal settings (French interface), showing the two-factor authentication line enabled and the path to reach it](https://staticfiles.gleap.io/p68ded63370c0efea37ac75fc/QTfAO9cuPLaXcWTEygsk2WpQjZIIvInprbMoM0YKs2ZtLY96cLQfsBe3ODTCk18wROvnM17DRHu.png)

> **Warning:** Your recovery codes are shown only once. Each one lets you sign in once if you lose access to your app. Keep them somewhere other than your phone, for example in a password manager.

> **Info:** When you enable it, your sessions open on your other devices are closed. Sign in again on each of them with your code.

## Sign in with two-factor authentication

Sign in as usual, with your password, with Google or with Shopify. Kanal then asks for your verification code: open your authenticator app, enter the 6-digit code and click **Verify**.

Don't have your phone? Click **Use a recovery code** and enter one of your codes. Each recovery code works only once.

> **Info:** After several wrong codes, the current sign-in is cancelled and you need to start it again. If a code is refused although it looks right, check that your phone's time is set automatically.

## Generate new recovery codes

In **My Profile**, the **Two-factor authentication** line shows how many recovery codes you have left. To get new ones, click **Recovery codes**, enter a code from your app, then click **Generate**. The old codes stop working.

## Disable two-factor authentication

In **My Profile**, click **Disable** on the **Two-factor authentication** line, then confirm with a code from your app or a recovery code.

## See who enabled it in your team

Two-factor authentication is individual: each member enables it on their own account, and it cannot be enforced for the whole team.

The account owner and the members allowed to manage the team can see who enabled it in **Settings > Team members**, in the **Two-factor authentication** column. Each time a member enables or disables it, this also appears in the history on that page.

![Team members page in Kanal settings (French interface), showing the two-factor authentication column in the member list](https://staticfiles.gleap.io/p68ded63370c0efea37ac75fc/xDpWxrmtgn1ASOJYkJ6NE89AFGVSsFq3jAJ49QTrA5dXsOHkQwxMK7sTQzXaoFNluGiSbMVWhwK.png)

## You lost your phone and your recovery codes

Contact our support: our team can disable two-factor authentication on your account so you can sign in again, then you can enable it again with your new phone.