How to Turn On Two-Step Verification (2FA) in Yapie

Passwords leak — through reused passwords, phishing pages or someone watching over your shoulder. Two-step verification (2FA) means a password alone isn't enough to get into your account.

#What you need

An authenticator app on your phone, such as **Google Authenticator**, **Microsoft Authenticator**, **Authy**, **1Password** or **Bitwarden**.

#Turn it on

1. Open **Settings › Privacy & security**. 2. Under **Two-step verification**, tap **Set up**. 3. In your authenticator app, tap **+** and **scan the QR code** (or type the key shown under it). 4. Type the **6-digit code** the app shows and tap **Turn on**.

You'll get a confirmation in Saved Messages.

#Signing in afterwards

On a new device, enter your password as usual. Yapie then asks for the **two-step code** — open your authenticator app and type the current 6-digit code. Each code changes every 30 seconds and **works only once**.

#How Yapie keeps 2FA strong

- Codes follow the **TOTP** standard used by banks and big tech. - **Replay protection** — a code that's been used can't be used again. - **Limits on wrong attempts** slow down guessing. - Turning 2FA off requires **your password and a current code**, and you're notified.

#Keep a way back in

- Save your **recovery codes** somewhere safe (a password manager or printed in a drawer). - When changing phones, move your authenticator accounts to the new phone **before** wiping the old one (most apps have an export or cloud-sync option).

#Lost your authenticator?

Use a recovery code to sign in, then set up 2FA again. If you have neither, contact support from another signed-in device.

#Frequently asked questions

Which authenticator app works with Yapie?

Any standard TOTP app: Google Authenticator, Microsoft Authenticator, Authy, 1Password, Bitwarden and others.

Will I need a code every time I open Yapie?

No. You only need it when signing in on a new device or after signing out.

Is an authenticator app better than SMS codes?

Yes. Authenticator codes are generated on your phone and can't be intercepted by SIM swap or SMS interception.