Two-factor authentication adds a time-based one-time password (TOTP) to account sign-in. The code is generated by an authenticator app using a secret stored on your device.
What 2FA verifies
TOTP verifies possession of the authenticator secret configured for your account. It is a sign-in security factor. It does not verify an email address, confirm an SMS alert destination, or prove ownership of a monitored website.
You do not need a particular vendor's app. Any standards-compatible TOTP app can work, including Google Authenticator, Microsoft Authenticator, 1Password, Authy, and Bitwarden.
Set up 2FA
- Open Account > Security.
- Find Two-factor authentication and select Set up 2FA.
- Scan the QR code with your authenticator app.
- If scanning is unavailable, enter the displayed manual setup key in the app.
- Enter the current six-digit authenticator code in Uptime Basics.
- Add an optional device name and select Verify and enable 2FA.
Uptime Basics confirms the code with the account identity service and marks the authenticator app as the preferred second factor.
Keep access secure
- Treat the QR code and manual setup key like a password.
- Do not paste the setup key into email, chat, or support requests.
- Remove old authenticator entries after confirming the new setup works.
- Contact support if you lose access to the configured authenticator before disabling 2FA.