Two-factor authentication and backup codes

Two-factor authentication adds an authenticator code to your AegisRunner sign-in. Configure it from Account settings → Security.

Enable two-factor authentication

1. Select Set up two-factor.
2. Scan the displayed QR code with your authenticator app.
3. Enter the current six-digit code.
4. Confirm the setup.
5. Save the generated backup codes in your own secure storage.
6. Test sign-in in a separate browser session while you still have access to the current session.

Setup or enforcement availability follows the account's plan and organization settings. The app will show an entitlement error if the requested option is unavailable.

Use a backup code

When an authenticator is unavailable, use an available backup code in the sign-in verification flow. Treat codes as account credentials and do not include them in screenshots or support messages.

Regenerating backup codes replaces the recovery set. Save the new set and stop using the old codes.

Disable or replace the authenticator

Use the two-factor controls in Security and provide the requested password and verification code. When replacing a device, establish a working authenticator or recovery path before removing the old one.

If you lose both the authenticator and usable backup codes, contact Support for the account-recovery process. Organization-required two-factor policies can also affect whether you may turn the feature off.