Two Factor Authentication

Two Factor Authentication

Two Factor Authentication (2FA), also known as Two-Step Authentication, adds an extra layer of security to your account. It is available to site owners, site admins, and users. With 2FA enabled, an unauthorised person cannot log in to your account even if they have your email and password.

About this feature


By requiring a second step at sign-in, 2FA significantly reduces the risk of unauthorised access to your Edbound AI site and account. This protects your intellectual property, your learners' personal information, your payment data, and any other sensitive information stored on the platform.

2FA on Edbound AI uses an authenticator app (Google Authenticator or Microsoft Authenticator) installed on your mobile device. The app generates a six-digit code that refreshes every 30 seconds, which you enter alongside your password to sign in.

How it works

Once 2FA is active on your account, signing in becomes a two-step process:
  1. You enter your email and password as usual.
  2. You are prompted to enter a six-digit code from your authenticator app.
Once both steps are verified, you are signed in.

When 2FA is required

If 2FA is enabled on your account, you will be asked for a verification code when you:
  1. Sign in to your site
  2. Reset your password
  3. Disable 2FA

Before you start: verify your email

You must verify your registered email address before you can set up 2FA.


If your email is not verified, the MFA Auth tab will show this message: "Please verify email before setting up multifactor authentication. Verify from here."

To verify your email:
  1. Click your profile icon > Account
  2. Open the Profile tab
  3. Click the Verify button next to your email address.
  4. A verification email is sent to your registered address. Open it and click the verification link.
Once verified, return to the MFA Auth tab to set up 2FA.

How to enable Two Factor Authentication

Here's how to enable two factor authentication including the authenticator apps download links.


  1. Click your profile icon > Account
  2. Click the MFA Auth tab
  3. Download Google Authenticator or Microsoft Authenticator on your mobile
  4. Open the authenticator app
  5. Scan the QR code shown on the MFA Auth screen
    1. If you cannot scan the QR code, generate a secret key in the app and enter it manually
  6. The authenticator app will display a six-digit code that refreshes every 30 seconds
  7. Enter the six-digit code on the MFA Auth screen
  8. Click Submit
  9. You will see a confirmation: "Multifactor authentication enabled."
2FA is now active on your account. The next time you sign in, you will be asked for a code from the authenticator app after entering your password.

How to disable Two Factor Authentication

You can disable 2FA in two ways: using your authenticator app, or using an email OTP if you no longer have access to the app.

If you have access to your authenticator app:

  1. Click your profile icon in the top right and go to Account
  2. Click the MFA Auth tab
  3. Open your authenticator app and find the current six-digit code for your Edbound AI account.
  4. Enter the six-digit code on the MFA Auth screen and click Submit.
2FA is now disabled on your account.

If you cannot access your authenticator app:

This applies if you have lost your phone, uninstalled the authenticator app, or switched to a new device.
  1. Click your profile icon in the top right and go to Account.
  2. Click the MFA Auth tab.
  3. Click "I can't access the authenticator app." A one-time authentication code is sent to your registered email address.
  4. Open the email, copy the code, and paste it into the Authentication Code field on the MFA Auth tab. 5. Click Submit.
2FA is now disabled on your account.

Info
You can also trigger the email OTP flow at sign-in by clicking "I can't access the authenticator app" on the 2FA verification screen during login.

For site admins: enforcing 2FA for all users

If you are a site owner or admin and want to require 2FA for everyone with an account on your site, you can enforce it from Settings > Signup and Checkout > Enforce Two Factor. See: How to enforce Two Factor Authentication for all users on your site.

Frequently Asked Questions

When is 2FA required?
When 2FA is enabled on your account, you will be asked for a verification code when you sign in, when you reset your password, and when you disable 2FA.

Which authenticator apps are supported?
Google Authenticator and Microsoft Authenticator. Any TOTP-compatible authenticator app should also work, since the QR code follows the standard TOTP format.

What if I lose access to my authenticator app?
Use the "I can't access the authenticator app" option on the MFA Auth tab or on the sign-in screen. A one-time code is sent to your registered email address. Enter that code to disable 2FA, then set it up again on your new device.

Do I have to set up 2FA?
2FA is opt-in by default for individual users. However, your site owner or admin may enforce 2FA for all users on the site, in which case you will be redirected to set it up at your next login.

    • Related Articles

    • Multi Factor Authentication

      Also known as Two Step Authentication, activating Multi-factor Authentication provides an additional layer of security to your account. This is an opt-in feature available to site owners, site admins and users as well. It helps prevent unauthorized ...

    • How to enforce Two Factor Authentication for all users on your account

      As a site owner or admin, you can require everyone with an account on your site to set up Two Factor Authentication (2FA). This protects your site from unauthorised access at the user level, not just the admin level. It is especially useful for sites ...

    • What data can and can not be retained upon cancelling my account?

      Thinking of cancelling your account? Why lose all the progress, student data, and hassle of storing content and data someplace else? Downgrade your account to a lower applicable plan or reach out to our teams to find out more options! Upon canceling ...