# Set up two-factor authentication

You can add an extra layer of security to your account with two-factor authentication (2FA).  Pushwoosh provides two options for two-factor authentication: email verification and an authentication app (e.g., Google Authenticator).

You have the flexibility to enable both email verification and the authentication app. This allows you to choose either method when logging in, and ensures you have a backup option in case there are issues with receiving codes.

## Enabling two-factor authentication

**1.** Log in to your account in **Pushwoosh Control Panel** and go to **My Account > Account settings**.

<img src="/shared-24.webp" alt="Pushwoosh Account settings entry point in Control Panel"/>

**2.** Then, click **Get started** in the **Two-Factor Authentication** section.

<img src="/shared-3.webp" alt="Two-factor authentication setup start screen in Pushwoosh"/>

3. Select the authentication method.

<img src="/shared-40.webp" alt="Choose 2FA method email verification or authentication app"/>

### Email verification

Click **Set up** to receive a verification code. Enter the code in the provided field to activate two-factor authentication.

<img src="/account-management-and-security-two-factor-authentication-1.webp" alt="Enter email verification code to enable two-factor authentication"/>

If two-factor authentication is enabled on your account, you will see a _**Your account is protected**_ message along with a green **Email Confirmed** badge. To log in to Pushwoosh, you will need to enter a verification code that will be sent to your registered email.

<img src="/shared-2.webp" alt="Your account is protected with Email Confirmed badge"/>

To turn off two-factor authentication, click the **Deactivate** button and enter the verification code that was sent to your email in the pop-up window that appears.

### Authentication app

To quickly and securely generate verification codes, use an app like Google Authenticator. Click **Set up** next to the **Authentication app** to configure this option.

<img src="/shared-35.webp" alt="Set up the authentication app for 2FA"/>

Open your authentication app and scan the QR code that appears. Then enter the verification code provided by the app.

<img src="/shared-23.webp" alt="Scan QR code and enter app-generated verification code"/>

<Aside type="note" title="How authentication apps work"> The authentication app generates TOTP (Time-based One-Time Password) codes, a standard defined in RFC 6238. TOTP creates a short-lived numeric code based on time and a shared secret key. After the initial setup, the app generates codes entirely offline; no internet connection is needed to create the codes. </Aside>

Once the setup process is complete, you will see the **Confirmed** status next to the **Authentication app** option.

<img src="/shared-19.webp" alt="Confirmed status shown for the authentication app"/>

## Setting up two-factor authentication for sub-accounts

[Invited users or sub-users](/product/account-management-and-security/multi-login-accounts/#how-to-invite-a-user) can set up two-factor authentication for their accounts using the same process as account owners. Each user must configure their own two-factor authentication settings.

To enable two-factor authentication:

**1.** Log in to your account in **Pushwoosh Control Panel** and go to **My Account > Account settings**.

**2.** Click **Get started** in the **Two-Factor Authentication** section.

**3.** Follow the same setup steps described in the [Enabling two-factor authentication](#enabling-two-factor-authentication) section above, choosing either email verification or an authentication app.

Once two-factor authentication is enabled, you will need to enter a verification code each time you log in to your account.