Dashboard

Two-Factor Authentication (2FA)

Last Updated: January 5, 2026

Two-Factor Authentication adds an extra layer of security to your VerifyHuman account by requiring a second form of verification beyond your password.

Table of Contents

Overview

Two-Factor Authentication (2FA) protects your account by requiring:

  1. Something you know - Your password
  2. Something you have - A code from your authenticator app or email

Even if someone obtains your password, they cannot access your account without the second factor.

2FA Requirements

Mandatory for Paid Plans

Paid subscribers (Starter, Growth, Pro, Enterprise) are required to enable 2FA.

When you upgrade to a paid plan:

  1. You'll be prompted to set up 2FA
  2. You must complete setup to access your dashboard
  3. 2FA remains required while on a paid plan

Optional for Free Plans

Free plan users can optionally enable 2FA for enhanced security:

Authentication Methods

VerifyHuman supports two 2FA methods:

Email OTP (Default)

TOTP (Time-based One-Time Password)

Recommended: TOTP is more secure and convenient for regular users.

Setting Up 2FA

Enable Email OTP

  1. Go to Dashboard > Security
  2. Find the Two-Factor Authentication section
  3. Click "Enable 2FA"
  4. Select "Email OTP" as your method
  5. Click "Enable"
  6. A verification code will be sent to your email
  7. Enter the code to confirm setup
  8. 2FA is now active

Enable TOTP (Authenticator App)

  1. Go to Dashboard > Security
  2. Find the Two-Factor Authentication section
  3. Click "Enable 2FA"
  4. Select "Authenticator App (TOTP)"
  5. Scan the QR code with your authenticator app:
    • Google Authenticator
    • Authy
    • Microsoft Authenticator
    • 1Password
    • Any TOTP-compatible app
  6. Enter the 6-digit code from your app
  7. Save your recovery codes (important!)
  8. Click "Verify and Enable"
  9. 2FA is now active

Recovery Codes

When setting up TOTP, you'll receive recovery codes:

Warning: If you lose both your authenticator and recovery codes, account recovery requires identity verification and may take several days.

Using 2FA

Login with Email OTP

  1. Enter your email and password
  2. Click "Send Code" to receive email
  3. Check your email for the 6-digit code
  4. Enter the code within 10 minutes
  5. Click "Verify" to complete login

Login with TOTP

  1. Enter your email and password
  2. Open your authenticator app
  3. Find the VerifyHuman entry
  4. Enter the current 6-digit code
  5. Click "Verify" to complete login

Tip: TOTP codes refresh every 30 seconds. If a code is about to expire, wait for the next one.

Recovery Options

Lost Authenticator Access (TOTP)

If you lose your phone or authenticator app:

  1. On the login page, click "Use Recovery Code"
  2. Enter one of your saved recovery codes
  3. Complete login
  4. Go to Security settings immediately
  5. Disable current 2FA and re-enable with new device

No Recovery Codes

If you've lost both your authenticator and recovery codes:

  1. Click "Can't access your authenticator?" on login
  2. Follow the account recovery process
  3. You'll need to verify your identity:
    • Answer security questions
    • Verify email ownership
    • May require ID verification
  4. Recovery may take 24-72 hours

Email OTP Not Received

If you're not receiving email codes:

  1. Check spam/junk folders
  2. Add noreply@verifyhuman.io to contacts
  3. Wait 2-3 minutes and request a new code
  4. Contact support if issue persists

Managing 2FA

Change 2FA Method

To switch between Email OTP and TOTP:

  1. Go to Dashboard > Security
  2. Disable current 2FA method
  3. Enable the new method
  4. Complete verification

Regenerate Recovery Codes

To get new recovery codes (invalidates old ones):

  1. Go to Dashboard > Security
  2. Click "Regenerate Recovery Codes"
  3. Verify with current 2FA code
  4. Save new recovery codes securely

Disable 2FA

Note: Paid plan users cannot disable 2FA.

For free plan users:

  1. Go to Dashboard > Security
  2. Click "Disable 2FA"
  3. Enter your current 2FA code
  4. Confirm disable

Troubleshooting

"Invalid code" Error

For Email OTP:

For TOTP:

"Code expired" Error

Request a new code and enter it promptly. Email codes expire after 10 minutes.

TOTP Codes Not Working

Common causes:

  1. Incorrect time on device - Enable automatic time sync
  2. Wrong account in app - Verify it says "VerifyHuman"
  3. App data corrupted - Remove and re-add the account

To fix:

  1. Disable and re-enable 2FA
  2. Scan the QR code again
  3. Verify codes match

Locked Out of Account

If completely locked out:

  1. Wait 15 minutes (rate limiting may apply)
  2. Try recovery code if available
  3. Click "Account Recovery" on login page
  4. Contact support: support@verifyhuman.io

Provide:

Security Best Practices

Do:

Don't:

See Also