Open **Settings** and find **Security**.

## Turn it on

1. Choose **Set up authenticator app**.

   ![](https://app.chatwoot.com/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBCQWZnUGdjPSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--b7a3d6a10aba4f1861839ff4c6d3c8f8a345f992/Screenshot%202026-10-25%20at%2013.41.09.png)

2. Scan the QR code with Google Authenticator or a similar app. Cannot scan? Open **Cannot scan? Enter the key by hand**.

3. Enter the 6-digit code the app shows, then **Verify and enable**.

4. **Save your recovery codes** (**Copy all**) somewhere safe. They are the way back in if you lose your phone.

   ![](https://app.chatwoot.com/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBCS0hnUGdjPSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--f7f688783e9bd536572b2a6567cead763d10dd54/Screenshot%202026-10-25%20at%2013.42.02.png)

Two-factor is only real once that code is confirmed.

## Other security actions

* **Change password** signs out every other device.

* **Login history** shows recent sign-ins. Unrecognised one? Change your password.

* Turning two-factor off asks you to confirm first.

Mayarin support never asks for your code or recovery codes.