The short answer

Settings > Security > Two-Factor Authentication. Pick SMS, authenticator app (Google Authenticator, Authy, 1Password), or hardware key (YubiKey, Titan). Required for Twin Mode and Agency tier.

Why 2FA matters here

Twin Mode is the deepest part of your account. If someone gains access, they could render videos using your face and voice. 2FA prevents that. We require it on every Twin Mode render and every Agency administrative action.

How to enable

  1. Settings > Security.
  2. Tap Two-Factor Authentication.
  3. Pick your method:
    • SMS: receives a 6-digit code via text. Fastest setup, weakest security.
    • Authenticator app: scan QR code with your app. Strongest software-only option. Recommended.
    • Hardware key: YubiKey or Google Titan. Strongest. Best for Agency tier admins.
  4. Confirm by entering a test code.
  5. Save 8 backup codes in a secure place.

Recovery

If you lose your second factor:

  • Use a backup code.
  • Or: contact support with proof of identity (we will not unlock without verification).

Twin Mode specifics

Every Twin Mode render asks for 2FA confirmation on first device. After successful confirmation, the device is trusted for 24 hours. Then 2FA is required again.

Related