fren
Log In

Enable two-factor authentication

3 min read07 November 2026

Two-factor authentication adds a second factor to the password: a six-digit code generated every thirty seconds by an app on your phone. The code never travels by SMS and cannot be derived from the password. Even if the password leaks, sign-in stays blocked without the app.

What to prepare

  • A TOTP app: Aegis, Authy, 1Password or Google Authenticator.
  • Automatic time enabled on the phone.
  • Access to the account email for recovery.
  • An offline place for the backup codes.

A TOTP app computes the code from a shared seed with no network connection. Pick one whose entries you can back up or export, otherwise a lost phone becomes a lost account.

Enable 2FA

  1. Sign in at https://dash.neoheberg.fr.
  2. Open the account settings, security section.
  3. Start two-factor authentication setup.
  4. Scan the QR code with the app, or enter the key manually if the camera is unavailable.
  5. Enter the six-digit code to confirm.
  6. Download and store the backup codes.

Do not close the tab before step 6: backup codes are sometimes shown only once. If the interface supports multiple devices, add a second one only if you can protect it as well as the first.

Keep the backup codes

Each code works once. Store them offline, on paper or in a password manager, and not in the same app as the TOTP seed. When you use one, mark it as consumed and regenerate the list as soon as the interface allows.

A backup code photographed into your phone's cloud gallery is not an offline backup. Treat it like a password.

Troubleshooting

Symptom Likely cause Action
Code rejected Clock drift Enable automatic time, resync
Code rejected Code already used or wrong account Wait for the next one, check the seed
QR unreadable Screen or camera Enter the key manually
Phone lost No TOTP left Use a backup code, then enroll a new device
No code, no device Recovery Contact support via the contact page with proof of ownership

Do not disable 2FA “to test” without re-enabling it immediately. When changing phones, enroll the new device before wiping the old one.

Verify

Log out, sign in again and enter a code. Then use a backup code to confirm it works, mark it as consumed and generate a new list if the interface allows. Keep the current session open until the test ends, so a mistake does not lock you out.

Advertisement

Was this article helpful?

Read next