# Add Authenticator as a second factor

How to add a second factor using an Authenticator/TOTP application as a user and admin.

> For the index of this section of the site, see [llms.txt](https://fusionauth.io/docs/llms.txt)

> **PLAN:** This feature requires [at least a Starter plan](https://fusionauth.io/docs/concepts/plans-and-limits/plans-features.md#starter-features).

Available since `1.26.0`

The Authenticator method is enabled by default on every tenant. To toggle please navigate to Tenants -> Edit Tenant -> Multi-Factor . The authenticator method is also referred to as Google Authenticator or Time-Based One-Time Password (TOTP).

## Enable MFA method on Tenant (Admin Facing)

The authenticator factor is enabled by default at the tenant level. It can be toggled on and off as needed.

![The tenant Multi-Factor tab with the authenticator method enabled.](https://fusionauth.io/img/docs/screenshots/account-tenant-mfa.png)

## Enable Authenticator Factor from Account Management (User Facing)

![The account page with the edit button and the two-factor and passkey links.](https://fusionauth.io/img/docs/screenshots/account-home.png)

1.  Navigate back to your account page.
2.  Click Manage two-factor
3.  Click Add two-factor
4.  There will be an option for an `Authenticator app`.

![The two-factor page with no methods configured.](https://fusionauth.io/img/docs/screenshots/account-two-factor.png)

![The Enable two-factor form for an authenticator app.](https://fusionauth.io/img/docs/screenshots/account-two-factor-authenticator.png)

Next,

1.  Scan the QR code with your favorite authenticator application such as Google Authenticator or Authy.
2.  (Optional) Enter a name for this method (for example, `Google Authenticator`).
3.  Enter the provided code.
4.  Click the Enable button.

## Recovery Codes (User Facing)

Now you will be presented with recovery codes. Save these in a safe space.

![The recovery codes shown after two-factor authentication is enabled.](https://fusionauth.io/img/docs/screenshots/account-recovery-codes.png)

trophy Success!

Upon the next login, you will be prompted for a code displayed by the Authenticator App in addition to your password.

## See It in Action (User Facing)

With the Authenticator method enabled, if you log out and log back in you will be presented with the following screen in addition to the typical login screen.

![The two-factor challenge shown after logging in.](https://fusionauth.io/img/docs/screenshots/account-two-factor-challenge.png)

Related

[APIs Disable Multi-Factor API API documentation for the FusionAuth Disable Multi-Factor API. multi-factor authenticationtwo-factor authentication](https://fusionauth.io/docs/apis/two-factor/disable-multi-factor.md)

[APIs Enable Multi-Factor API API documentation for the FusionAuth Enable Multi-Factor API. multi-factor authenticationtwo-factor authentication](https://fusionauth.io/docs/apis/two-factor/enable-multi-factor.md)

[APIs Generate a Secret API API documentation for the FusionAuth Generate a Secret API. multi-factor authenticationtwo-factor authentication](https://fusionauth.io/docs/apis/two-factor/generate-a-secret.md)

[APIs Generate Recovery Codes API API documentation for the FusionAuth Generate Recovery Codes API. multi-factor authenticationtwo-factor authentication](https://fusionauth.io/docs/apis/two-factor/generate-recovery-codes.md)
---

## Other pages in Account Management

> For the full index of this section, see [Users](https://fusionauth.io/docs/llms-users.txt).

- [Add WebAuthn Passkey](https://fusionauth.io/docs/users/account-management/add-webauthn.md): Learn how to add a WebAuthn passkey.
- [Bootstrapping Login For Self-Service Account Management](https://fusionauth.io/docs/users/account-management/bootstrapping-login.md): How to allow users to access self-service account management from external applications.
- [Customizing Self-Service Account Management](https://fusionauth.io/docs/users/account-management/customizing-account-management.md): How to customize both the data collected and the look and feel of Self Service Account Management.
- [Self-Service Account Management](https://fusionauth.io/docs/users/account-management.md): Setting up multi-factor authentication as an admin and user, as well as configuring the self-service account management pages.
- [Account Troubleshooting](https://fusionauth.io/docs/users/account-management/troubleshooting.md): Learn about troubleshooting steps for Self Service Account Registration.
- [Add Email as a second factor](https://fusionauth.io/docs/users/account-management/two-factor-email.md): Learn how to add a second factor using Email as both an admin and a user.
- [Add Phone as a second factor](https://fusionauth.io/docs/users/account-management/two-factor-phone.md): Learn how to add a second factor using SMS as both an admin and a user.
- [Update User Profiles and Passwords](https://fusionauth.io/docs/users/account-management/updating-user-data.md): How to update user profile data and change user passwords.