# Setting up two-factor authentication

Two-factor authentication adds an extra layer of security to your account, beyond just your email/username and password. To enable it, you need to download an Authenticator app on your smartphone. Popular choices include:

* Google Authenticator
* Microsoft Authenticator
* LastPass Authenticator

Password managers like 1Password or Bitwarden can also generate your two-factor codes while securing your passwords.

### How does two-factor authentication enhance security?

Without two-factor authentication, logging in to CareerBldr requires just your email (or username) and password. This is sufficient for many, but it's vulnerable if your password is discovered by someone else.

Two-factor authentication requires a two-step verification process:

1. You'll enter your email/username and password as usual.
2. Then, you'll need a code that only your Authenticator app can generate, which changes periodically.

The chances are slim that a potential intruder has both your login credentials and your mobile phone, making your data much safer.

### How to enable two-factor authentication on CareerBldr?

Firstly, sign in to your account and head over to the Settings page.

In the "Security" section, you will find a sub-section called "Two-Factor Authentication". If you haven't enabled 2FA yet, you should see a button that's labelled "Enable 2FA" like this.

<figure><img src="https://files.gitbook.com/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FwXuoRpUFoheTfcsuvMeO%2Fuploads%2FqXVc1TpP6Wzc0jbaY22t%2Ftwo-factor-auth.webp?alt=media&#x26;token=13361789-ed61-4ed2-8a22-535128935a19" alt=""><figcaption></figcaption></figure>

Click on the "Enable 2FA" button, and you should be presented with a QR Code that you can scan on your mobile phone. In case you are using your computer to generate two-factor codes, you can also copy the secret link below and paste it in your password manager.

<figure><img src="https://files.gitbook.com/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FwXuoRpUFoheTfcsuvMeO%2Fuploads%2FMUrdIlFaCn6zLcm4ap1b%2Fgenerated-qr-auth.png?alt=media&#x26;token=d8cd107d-4f84-44cf-8bc4-aa0c20aef30a" alt=""><figcaption></figcaption></figure>

Once you've scanned the QR Code, hit "Continue" and you would be asked to enter the code generated from the authenticator app. When you have successfully entered the correct code, 2FA will be enabled on your account.

You will also be presented with a few backup codes to store for safe keeping. You can use one of these one-time use codes in case you do not have access to your authenticator device.

<figure><img src="https://files.gitbook.com/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FwXuoRpUFoheTfcsuvMeO%2Fuploads%2FU26CLjPN5jNC16t12RbM%2Fbackup-auth.webp?alt=media&#x26;token=9c181418-66aa-4169-9233-975daf6de8c8" alt=""><figcaption></figcaption></figure>

The next time you login, after having entered your email and password, you would also be asked to enter your one-time password, which is the 6 digit code from your authenticator app.

<figure><img src="https://files.gitbook.com/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FwXuoRpUFoheTfcsuvMeO%2Fuploads%2FGKr6vkUhU7bysNi87LM3%2Ftwo-factor-example-auth.png?alt=media&#x26;token=7358f5d1-fc1e-4021-a931-c1d2938c10a3" alt=""><figcaption></figcaption></figure>
