# Setup 2-Factor Authentication in the Vendor Portal

**URL:** <https://community.replicated.com/t/setup-2-factor-authentication-in-the-vendor-portal/70>\
**Category:** How do I?\
**Tags:** vendor-portal\
**Created:** [March 6, 2018, 8:50pm UTC](https://community.replicated.com/t/setup-2-factor-authentication-in-the-vendor-portal/70 "2018-03-06T20:50:49Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![marc](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.replicated.com/marc/32/7_2.png) [@marc](https://community.replicated.com/u/marc)\
**Post date:** [March 6, 2018, 8:50pm UTC](https://community.replicated.com/t/setup-2-factor-authentication-in-the-vendor-portal/70/1 "2018-03-06T20:50:49Z")

</div>

With two-factor authentication (2fa) enabled, you’ll be asked to provide an authentication code as  
well as your password, when you access the Replicated vendor portal. Replicated utilizes the open  
algorithm known as the Time-based One-time Password  
([TOTP](https://en.wikipedia.org/wiki/Time-based_One-time_Password_Algorithm)) which is specified by  
the Internet Engineering Task Force (IETF) under [RFC 6238](https://tools.ietf.org/html/rfc6238).

To enable two-factor authentication :

- Log in to Replicated and visit [your account settings](https://vendor.replicated.com/account-settings).
- Click on the “Set up two-factor authentication” button
- Enter your password to get to the two-factor configuration screen.
- Open a supported two-factor authentication app on your device (we suggest Google Authenticator).
- Scan the QR code or enter the alphanumeric code into the app.
- Enter the generated code in the form.

## Save the recovery codes

You will be presented with an option to download a set of recovery codes. These codes can be used any  
time (one time per code), in case you lose your device. It’s important to save these codes in a secure  
location.

## Log out

Try it out. Log out of your account and log back in. You will be prompted to enter a one-time code  
generated by the supported application.
