Two-factor authentication (2FA) adds a second verification step when you log in. Even if someone knows your password, they can't access your account without also having your authenticator app.

What You Need

Any TOTP-compatible authenticator app, such as:

Google Authenticator (iOS / Android)
Authy (iOS / Android / Desktop)
1Password (has built-in TOTP)
Microsoft Authenticator
Apple Passwords (iOS 18+)

Setting Up 2FA

Go to Settings → Security
Find the Two-Factor Authentication section and click Enable 2FA
A QR code appears — scan it with your authenticator app
Enter the 6-digit code from your app to confirm it's working
Click Verify and Enable

2FA is now active on your account.

Before enabling 2FA, download and save your backup codes (shown on the next screen). Store them somewhere safe — they're the only way to recover access if you lose your authenticator device.

Logging In with 2FA

After enabling 2FA, the login flow becomes:

Enter your email and password as usual
A second screen asks for your 6-digit verification code
Open your authenticator app, find the Krokanti Notes entry, and type the current code
Click Verify — you're logged in

The code changes every 30 seconds. Enter it before it expires (there's a small grace window).

Backup Codes

Backup codes let you log in if you lose access to your authenticator app (lost phone, broken app, etc.).

Viewing your backup codes:

Go to Settings → Security
Under 2FA, click View backup codes
Each code can be used exactly once

Regenerating backup codes: If you've used all your codes or suspect they're compromised:

Go to Settings → Security
Click Regenerate backup codes
Your old codes are immediately invalidated — save the new ones

Store backup codes in a password manager, printed paper in a safe place, or a separate encrypted file. Treat them like your password.

Disabling 2FA

Go to Settings → Security
Under Two-Factor Authentication, click Disable 2FA
Enter your current TOTP code (or a backup code) to confirm
2FA is removed from your account

You can re-enable 2FA at any time. Each time you set it up, a new secret is generated — you'll need to re-scan the QR code in your authenticator app.

Lost Access to Your Authenticator

If you've lost your phone and your backup codes:

Contact support at support@krokanti.com from your registered email address
We'll verify your identity through an alternative process and help you regain access

Two-Factor Authentication Setup