> For the complete documentation index, see [llms.txt](https://fusionauth.io/docs/llms.txt)

# Add Authenticator as a second factor | FusionAuth Docs

How to add a second factor using an Authenticator/TOTP application as a user and admin.

# Add Authenticator as a second factor

[Edit on GitHub](https://github.com/FusionAuth/fusionauth-site/blob/main/astro/src/content/docs/lifecycle/manage-users/account-management/two-factor-authenticator.mdx)

[View Markdown](https://fusionauth.io/docs/lifecycle/manage-users/account-management/two-factor-authenticator.md)

This feature is only available in paid plans. To learn more, see [our pricing page](https://fusionauth.io/pricing.md).

Available since version `1.26.0`

The Authenticator method is enabled by default on every tenant. To toggle please navigate to Tenants -> Edit Tenant -> Multi-Factor . The authenticator method is also referred to as Google Authenticator or Time-Based One-Time Password (TOTP).

## Enable MFA method on Tenant (Admin Facing)

The authenticator factor is enabled by default at the tenant level. It can be toggled on and off as needed.

![Toggle Authenticator On Tenant](https://fusionauth.io/img/docs/lifecycle/manage-users/account-management/toggle-authenticator-tenant.png)

## Enable Authenticator Factor from Account Management (User Facing)

![Account Management Index](https://fusionauth.io/img/docs/lifecycle/manage-users/account-management/account-management-index-crop.png)

1.  Navigate back to your account page.
2.  Click Manage two-factor
3.  Click Add two-factor
4.  There will be an option for an `Authenticator app`.

![Add Factors](https://fusionauth.io/img/docs/lifecycle/manage-users/account-management/add-factors-home-crop.png)

![Authenticator Add Account](https://fusionauth.io/img/docs/lifecycle/manage-users/account-management/authenticator-add-account.png)

Next,

1.  Scan the QR code with your favorite authenticator application such as Google Authenticator or Authy.
2.  (Optional) Enter a name for this method (for example, `Google Authenticator`).
3.  Enter the provided code.
4.  Click the Enable button.

## Recovery Codes (User Facing)

Now you will be presented with recovery codes. Save these in a safe space.

![Recovery Codes](https://fusionauth.io/img/docs/lifecycle/manage-users/account-management/mfa-recovery-codes-crop.png)

Success!

Upon the next login, you will be prompted for a code displayed by the Authenticator App in addition to your password.

## See It in Action (User Facing)

With the Authenticator method enabled, if you log out and log back in you will be presented with the following screen in addition to the typical login screen.

![Challenge Account Management](https://fusionauth.io/img/docs/lifecycle/manage-users/account-management/auth-challenge-account-screen-crop.png)